SYSTEM FOR TRACING PROCESS AND FILE USING EXTENDED SECURITY LEVEL

摘要

PURPOSE: A system for tracing a process and a file by using an extended security level is provided to suggest a forced access control policy of multiple grade securities in which a corrected BLP(Bell & LaPadula) model is applied to a windows kernel. CONSTITUTION: A tracking object judgment device(11) inspects whether or not an object is set up as a target object in an inquired expansion security table. If so, a log generating device(15) records the working contents of a corresponding process and a file as a log. A security level comparison device(16) compares the security grades set in the security labels of the process and the file. As long as the comparison results of the security level are identical to each other, a kernel calling permission device(17) allocates a file input/output authority. The kernel calling permission device permits the kernel calling.