基于目标的安全管理体系在MIS中的应用

为实现大型MIS系统的安全管理,提出了一种基于目标的安全管理体系.对MIS系统的用户而言,只能通过用户界面与该系统进行交互,因此,将MIS系统中用户界面上需要管理的对象(目标)进行注册,并定义目标各种可能的状态(如可用、不可用、可见、不可见和只读等).对于某个用户,可为其分配不同的对象集,并定义该集合中对象的状态,使系统对用户权限的控制粒度达到任意程度,从而为MIS系统提供了一种灵活的安全管理策略.

Target-based Security Management Architecture Applied to Management Information System

In order to implement the security management of management information system (MIS), a target-based security management architecture is proposed. For MIS users, the user interface (UI) is the only way to interact with the MIS system, so all the objects (targets) which need to be managed on UI is registered first, thus for every target the state such as enabled, not enabled, visible, not visible, readonly etc., is assigned. For some users, a set of targets with some state is assigned so that the management granularity in MIS can reach any degree. This approach provides a very flexible way to the security management in MIS.