Using Refinement in Formal Development of OS Security Model

Algorithmization of Reference Security Models of Corporate Automation Systems Based on Formal Security Models

“…One such approach is that all the processes of information security in AS can be described by the subjects' access to clearly defined objects or groups of objects. An example of such approach is Harrison-Ruzzo-Ulman model [2,3]. In this model AS with discretionary access control is described as set of matrices, each of which corresponds to the AS.…”

“…Another approach involves mandatory access control that is often described by terms of Bell LaPadula classical model and special models based on it. [2,3]. Bell automation model presenting AS as an abstract system.…”

“…The approach is to obtain a set of formal security models of logical access control and information flow (the set of DP Another approach involves mandatory access control that is often described by terms of Bell LaPadula classical model and special models based on it. [2,3]. Bell-LaPadula classical model is an automation model presenting AS as an abstract system.…”

“…• abstract functions, specifying the access level and the current access level for each subject and the level of confidentiality for each object; access matrix that gives an opportunity to unite discretionary and mandatory access control a Described classical models include special definitions of the elements and functions of the AS, in these models the following important features of the functioning of modern AS are not considered [3]:…”

“…The third approach is taken with the purpose of providing a theoretical analysis of access rights le kage conditions and the implementation of prohibited information flows by memory or by into account the essential features of modern AS. The approach is to obtain a set of formal security models of logical access control and information flow (the set of DP-models) [3].…”