An Extended Non-Interference Security Model (ENISM) and Its CSP-Based Description and Verification Method

Abstract

Based on the theory of non-interference,this paper proposes an extended non-interference security model ENISM,for the purpose of specification and analysis of information flow policies in operating systems.This paper includes the following works: firstly,system modules would be recognized as domains,and the traces set which contains traces may be implemented after a system state and the data values set at the state are two most important analysis gist for defining the secure states in ENISM.Secondly,the sufficient conditions ENISM-CC are proposed on which unsafe traces and data flow is not existed.Thirdly,this paper gives out a formal description method for system design and describes the semantic ENISM-CC based on the Communicating Sequential Processes CSP.