期刊名称:International Journal of Advanced Computer Science and Applications(IJACSA)
印刷版ISSN:2158-107X
电子版ISSN:2156-5570
出版年度:2021
卷号:12
期号:3
页码:421-429
DOI:10.14569/IJACSA.2021.0120350
出版社:Science and Information Society (SAI)
摘要:By defining and testing the Bell-LaPadula access control environment within it, this paper implements a Multi-Level Protection (MLP) lattice model architecture based on a graph database. By leveraging Bell-LaPadula security concepts and the MLP lattice model, the graph database (Neo4j) is used as a method for enforcing MLP policy. A formal structure in which Bell-LaPadula protection concepts are applied to track the information flow within a single domain after checking that the MLP lattice model is correctly represented in the graph database. Finally, we expand and improve the formal structure so that for the MLP multi-domain context, an MLP security access control policy can be defined. With the new enhanced model, we can conduct a query to verify if the subject in one domain can access the object in another domain, while a trust relationship connects the two domains.