Examples of MAC

本文探讨了多种MAC(强制访问控制)模型及其实际应用案例,包括由Adamantix项目开发的RSBAC、美国国家安全局推出的SELinux等。此外还列举了其他一系列基于不同平台和技术的MAC实施案例。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

Examples of MAC
• Linux enhancements
- RSBAC by the Adamantix project
- SE by the NSA
-LIDS
• eTrust CA-ACF2 by CA
• Multics-based Honeywell
•SCOMP
• Pump
• Purple Penelope
When most people talk about the types of MAC, they refer to models such as Bell-LaPadula Policy
and Biba. Implementation examples are Linux enhancements, such as RSBAC by the Adamantix
project; SE (Security Enhanced) Linux by the NSA (SE Linux currently supports 30 object classes
and 122 object permissions (rules); Flask, which has been incorporated into SE; or LIDS. Each of
these must be examined in terms of their ability to allow information flow to/from its associated
object class.
The following are additional examples:
• Computer Associate's eTrust CA-ACF2 Security for z/OS and OS/390
• Multics-based Honeywell computer
• SCOMP (Secure Communications Processor)
• Pump (developed by the US Naval Research Laboratory)
• Purple Penelope (An NT workstation MLS wrapper from the British Defense Evaluation and
Research Agency)
Following are references for these systems:
http://itlab.uta.edu/cse6392/Fall2003/Presentations/Security/Raman%20Securityl.pdf
http://www.networkpenetration.com/adv steg_posix flock.html
http://www.tresys.com/Downloads/selinux-tools/apol/iflow_help.txt

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值