Lattice model based on a new information security function

Abstract

Information security is a combination of confidentiality, integrity and availability, and the problem is how to combine them organically. There is a method based on a planar vector concerning the confidentiality and integrity in the paper of Sandhu, (1993), but this method isn't sufficient, so this paper presents a lattice model. A new function H(N, /spl alpha/, /spl beta/) of information security, based on confidentiality and integrity, is introduced. The safety classification of the object is divided by the H(N, /spl alpha/, /spl beta/) value, the information flow policy is described by the function value of two objects and a new information flow lattice model is obtained. The model satisfies the characteristic of Denning (1976), and is found to be reasonable and safe by verification. The model is also an expansion of the lattice-based BLP model and the lattice-based Biba model.