为实现高效的安全存储系统,在分析现有访问控制模型的基础上,引入人工免疫算法,提出面向安全存储系统的轻量级访问控制模型IBLSAC.首先介绍人工免疫算法基本原理的基础,以及人工免疫算法的特性.再给出IBLSAC的构成,以及IBLSAC中主要元素的定义,介绍差异选择算法和访问请求检查算法等的流程,从安全性能、成本和适应性3方面分析IBLSAC的性能.最后实现IBLSAC的原型系统,设置不同的匹配阈值,测试当自体数量不同时,原型系统识别全部非法访问请求所需的检测器数量.结果表明IBLSAC在保证较好安全性能的同时,安全开销较小且开销稳定,能够满足实现能保持较高I/O性能的安全存储系统的要求.
In order to build an efficient secure storage system,based on the analysis of the current access control model,the artificial immune algorithm was introduced and the immunity-based light access control model for secure storage system named IBLSAC was proposed.Firstly the artificial immune algorithm and its characters were analyzed.Then the definition of elements in IBLSAC and the structure of IBLSAC were given.The main algorithms in IBLSAC such as diversity selection algorithm and access request checking algorithm were described.The properties of IBLSAC were analyzed from safety,cost and adaptability aspects.At last the prototype of IBLSAC was realized,and using different threshold,the number of detectors needed to check out all illegal access requests was tested when the size of self set was different.The result shows that IBLSAC has good safety with low and stable consumption and can be used to realize a secure storage system,which can keep high I/O performance.