TOMOYO Linux：基于应用程序执行状态的强制访问控制方法
TOMOYO Linux: A Mandatory Access Control Method Based on Application Execution State
AI总结：
提出一种基于应用程序历史和执行意图的强制访问控制方法，通过TOMOYO Linux实现，降低恶意访问和误操作风险。
摘要：
现有的访问控制方法基于作为主体的应用程序和作为对象的文件的组合来授予访问请求。因此，应用程序的意图以及授予访问请求可能造成的潜在影响未被考虑。在本文中，我们提出了一种基于应用程序历史和意图的新型访问控制方法。通过我们的访问控制方法，系统管理员可以降低由恶意访问尝试和错误操作引起的风险。本文将解释该概念和实现设计，并提供TOMOYO Linux（我们对Linux的新型访问控制方法的实现）的简要评估报告。
英文摘要：
Existing access control methods grant access requests based on the combinations of applications as subject and files as objects. Therefore intents of applications and the possible effects caused by granting the access requests have not been taken into consideration. In this paper, we propose a new access control method based on application history and intents. With our access control method, system administrators can reduce the risks caused by malicious access attempts and wrong operations. In this paper, the concept and implementation design will be explained as well as the brief evaluation report of TOMOYO Linux, our implementation of the new access control method to Linux.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
