¹School of Computer Science and Technology, Xidian University, Xi’an, China
²School of Computer Science and Technology, Northwestern Polytechnical University, Xi’an , China
³The Information Engineering University, Zhengzhou, China3

---

Abstract—In this paper, we propose analysis methods based on security entropy to overcome the problem of quantitative analysis, after going through the study of access control capability assessment for computer information system. At First, we computed the uncertainty how system determine irregular access behavior using the security entropy theory. Next, we defined the security theorem of classificatory information system, and proposed the standard of access control capability. Finally, we analyzed the typical access control models using the methods, and compared security and applicability of them. It proved that the method is appropriate for security quantitative analysis of access control model and for the evaluation of access control capability in information system.

Index Terms—Information entropy, Security entropy, Classificatory access control model, Direct unauthorized access; Right about access, Indirectly unauthorized access.

[PDF]

Cite: Tianwei Che, Jianfeng Ma, Na Li, and Chao Wang, "Access Control Capability Assessment Method Based on Security Entropy," Journal of Computers vol. 9, no. 12, pp. 2804-2808, 2014.