Research on Mandatory Access Control Model for Application System

In order to solve the problem that BLP model directly can’t be applied to application systems, an Application System-oriented Mandatory Access Control (ASOMAC) model extended from BLP is proposed. Combining with role and security label , this model achieves the principle of least privilege and separation of duty, and  not only improve effectively the agility of mandatory access control, but also suitable for the characteristics and requirement of application systems. The formal definition and theorem system of ASOMAC are presented in this paper, finally the design and analysis of mandatory access control system based on ASOMAC are performed.