{"id":477953,"date":"2023-08-09T09:22:45","date_gmt":"2023-08-09T09:22:45","guid":{"rendered":""},"modified":"2023-09-05T11:15:44","modified_gmt":"2023-09-05T11:15:44","slug":"mandatory-access-control","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/mandatory-access-control\/","title":{"rendered":"\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236"},"content":{"rendered":"

\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236 (MAC) \u662f\u8ba1\u7b97\u673a\u7cfb\u7edf\u4e2d\u4f7f\u7528\u7684\u4e00\u79cd\u5b89\u5168\u673a\u5236\uff0c\u7528\u4e8e\u6839\u636e\u9884\u5b9a\u4e49\u7684\u89c4\u5219\u548c\u7b56\u7565\u5bf9\u8d44\u6e90\u8bbf\u95ee\u5b9e\u65bd\u9650\u5236\u3002\u4e0e\u8d44\u6e90\u6240\u6709\u8005\u786e\u5b9a\u8bbf\u95ee\u6743\u9650\u7684\u81ea\u4e3b\u8bbf\u95ee\u63a7\u5236 (DAC) \u4e0d\u540c\uff0cMAC \u786e\u4fdd\u8bbf\u95ee\u51b3\u7b56\u7531\u7cfb\u7edf\u7ba1\u7406\u5458\u96c6\u4e2d\u505a\u51fa\u3002\u672c\u6587\u63a2\u8ba8\u4e86\u4ee3\u7406\u670d\u52a1\u5668\u63d0\u4f9b\u5546 OneProxy (oneproxy.pro) \u7f51\u7ad9\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u5b9e\u65bd\u53ca\u5176\u91cd\u8981\u6027\u3002<\/p>\n

\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u8d77\u6e90\u548c\u9996\u6b21\u63d0\u53ca<\/h2>\n

\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u6982\u5ff5\u51fa\u73b0\u5728\u8ba1\u7b97\u673a\u5b89\u5168\u65e9\u671f\uff0c\u5e76\u4e8e 20 \u4e16\u7eaa 70 \u5e74\u4ee3\u7531\u7f8e\u56fd\u56fd\u9632\u90e8 (DoD) \u9996\u6b21\u6b63\u5f0f\u63d0\u51fa\u3002\u53ef\u4fe1\u8ba1\u7b97\u673a\u7cfb\u7edf\u8bc4\u4f30\u6807\u51c6 (TCSEC)\uff0c\u901a\u5e38\u79f0\u4e3a\u300a\u6a59\u76ae\u4e66\u300b\uff0c\u6982\u8ff0\u4e86\u8bc4\u4f30\u653f\u5e9c\u7cfb\u7edf\u4e2d\u8ba1\u7b97\u673a\u5b89\u5168\u6027\u7684\u6807\u51c6\u3002TCSEC \u5f15\u5165\u4e86\u4e0d\u540c\u7684\u5b89\u5168\u7ea7\u522b\uff0c\u6bcf\u4e2a\u7ea7\u522b\u90fd\u6709\u4e00\u5957\u5f3a\u5236\u63a7\u5236\u63aa\u65bd\uff0c\u4ee5\u786e\u4fdd\u66f4\u9ad8\u7ea7\u522b\u7684\u4fdd\u62a4\u4ee5\u9632\u6b62\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002<\/p>\n

\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u8be6\u7ec6\u4fe1\u606f<\/h2>\n

\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u65e8\u5728\u89e3\u51b3 DAC \u5e26\u6765\u7684\u5b89\u5168\u95ee\u9898\uff0c\u5728 DAC \u4e2d\uff0c\u4e2a\u4eba\u7528\u6237\u5bf9\u8d44\u6e90\u8bbf\u95ee\u62e5\u6709\u76f8\u5f53\u5927\u7684\u63a7\u5236\u6743\u3002\u5728 MAC \u4e2d\uff0c\u8bbf\u95ee\u6743\u9650\u57fa\u4e8e\u654f\u611f\u5ea6\u6807\u7b7e\u548c\u5b89\u5168\u8bb8\u53ef\u3002\u6bcf\u4e2a\u8d44\u6e90\uff08\u5305\u62ec\u6587\u4ef6\u3001\u76ee\u5f55\u548c\u8fdb\u7a0b\uff09\u90fd\u5206\u914d\u6709\u4e00\u4e2a\u4ee3\u8868\u5176\u654f\u611f\u5ea6\u7ea7\u522b\u7684\u6807\u7b7e\u3002\u7528\u6237\u8fd8\u4f1a\u6839\u636e\u5176\u89d2\u8272\u548c\u804c\u8d23\u5206\u914d\u5b89\u5168\u8bb8\u53ef\u3002<\/p>\n

\u5b89\u5168\u5185\u6838\u662f\u64cd\u4f5c\u7cfb\u7edf\u7684\u6838\u5fc3\u7ec4\u4ef6\uff0c\u5b83\u6267\u884c\u8bbf\u95ee\u63a7\u5236\u7b56\u7565\u5e76\u786e\u4fdd\u8bbf\u95ee\u8bf7\u6c42\u7b26\u5408\u5b9a\u4e49\u7684\u89c4\u5219\u3002\u8be5\u5185\u6838\u5145\u5f53\u5b88\u95e8\u4eba\uff0c\u8c03\u89e3\u6240\u6709\u8bbf\u95ee\u5c1d\u8bd5\u5e76\u4ec5\u5141\u8bb8\u6388\u6743\u4ea4\u4e92\u3002<\/p>\n

\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u5185\u90e8\u7ed3\u6784\u53ca\u5176\u5de5\u4f5c\u539f\u7406<\/h2>\n

\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u5185\u90e8\u7ed3\u6784\u6d89\u53ca\u51e0\u4e2a\u5173\u952e\u7ec4\u4ef6\uff1a<\/p>\n

    \n
  1. \n

    \u5b89\u5168\u6807\u7b7e<\/strong>\uff1a\u7cfb\u7edf\u4e2d\u7684\u6bcf\u4e2a\u8d44\u6e90\u548c\u4e3b\u4f53\u90fd\u5206\u914d\u6709\u4e00\u4e2a\u5b89\u5168\u6807\u7b7e\u3002\u8fd9\u4e9b\u6807\u7b7e\u5305\u542b\u6709\u5173\u5b9e\u4f53\u7684\u654f\u611f\u5ea6\u7ea7\u522b\u548c\u5b8c\u6574\u6027\u7684\u4fe1\u606f\u3002<\/p>\n<\/li>\n

  2. \n

    \u5b89\u5168\u8bb8\u53ef<\/strong>\uff1a\u6839\u636e\u7528\u6237\u5728\u7ec4\u7ec7\u5185\u7684\u89d2\u8272\u548c\u804c\u8d23\u4e3a\u5176\u5206\u914d\u5b89\u5168\u6743\u9650\u3002\u7528\u6237\u7684\u5b89\u5168\u6743\u9650\u5e94\u7b49\u4e8e\u6216\u9ad8\u4e8e\u4ed6\u4eec\u8981\u8bbf\u95ee\u7684\u8d44\u6e90\u7684\u654f\u611f\u5ea6\u6807\u7b7e\u3002<\/p>\n<\/li>\n

  3. \n

    \u5b89\u5168\u7b56\u7565\u6570\u636e\u5e93<\/strong>\uff1a\u6b64\u6570\u636e\u5e93\u5305\u542b\u89c4\u5b9a\u5982\u4f55\u505a\u51fa\u8bbf\u95ee\u51b3\u7b56\u7684\u89c4\u5219\u548c\u7b56\u7565\u3002\u5b83\u5305\u62ec\u8bfb\u53d6\u3001\u5199\u5165\u3001\u6267\u884c\u548c\u5176\u4ed6\u6743\u9650\u7684\u89c4\u5219\u3002<\/p>\n<\/li>\n

  4. \n

    \u5b89\u5168\u5185\u6838<\/strong>\uff1a\u5b89\u5168\u5185\u6838\u662f\u8d1f\u8d23\u6267\u884c\u8bbf\u95ee\u63a7\u5236\u7684\u6838\u5fc3\u7ec4\u4ef6\u3002\u5b83\u8c03\u89e3\u8bbf\u95ee\u8bf7\u6c42\u5e76\u786e\u4fdd\u5b83\u4eec\u7b26\u5408\u5b9a\u4e49\u7684\u5b89\u5168\u7b56\u7565\u3002<\/p>\n<\/li>\n<\/ol>\n

    \u5f53\u7528\u6237\u6216\u8fdb\u7a0b\u5c1d\u8bd5\u8bbf\u95ee\u8d44\u6e90\u65f6\uff0c\u5b89\u5168\u5185\u6838\u4f1a\u68c0\u67e5\u5b89\u5168\u6807\u7b7e\u548c\u8bb8\u53ef\uff0c\u4ee5\u786e\u5b9a\u662f\u5426\u5141\u8bb8\u6216\u62d2\u7edd\u8bbf\u95ee\u3002<\/p>\n

    \u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u5173\u952e\u7279\u5f81\u5206\u6790<\/h2>\n

    \u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u63d0\u4f9b\u4e86\u51e0\u4e2a\u5173\u952e\u529f\u80fd\uff0c\u4f7f\u5176\u6210\u4e3a\u4e00\u79cd\u5f3a\u5927\u7684\u5b89\u5168\u673a\u5236\uff1a<\/p>\n

      \n
    1. \n

      \u96c6\u4e2d\u63a7\u5236<\/strong>\uff1aMAC \u5141\u8bb8\u7cfb\u7edf\u7ba1\u7406\u5458\u96c6\u4e2d\u7ba1\u7406\u8bbf\u95ee\u6743\u9650\uff0c\u786e\u4fdd\u6574\u4e2a\u7cfb\u7edf\u7684\u4e00\u81f4\u4e14\u53ef\u63a7\u7684\u5b89\u5168\u6001\u52bf\u3002<\/p>\n<\/li>\n

    2. \n

      \u5f3a\u5927\u7684\u5b89\u5168\u6a21\u578b<\/strong>\uff1a\u901a\u8fc7\u4f7f\u7528\u6807\u7b7e\u548c\u8bb8\u53ef\uff0cMAC \u63d0\u4f9b\u4e86\u5f3a\u5927\u7684\u5b89\u5168\u6a21\u578b\uff0c\u53ef\u9632\u6b62\u672a\u7ecf\u6388\u6743\u8bbf\u95ee\u654f\u611f\u8d44\u6e90\u3002<\/p>\n<\/li>\n

    3. \n

      \u5c3d\u91cf\u51cf\u5c11\u4eba\u4e3a\u9519\u8bef<\/strong>\uff1a\u4f7f\u7528 DAC\uff0c\u8bbf\u95ee\u51b3\u7b56\u6743\u5c06\u7559\u7ed9\u4e2a\u4eba\u7528\u6237\uff0c\u8fd9\u589e\u52a0\u4e86\u5728\u8bbe\u7f6e\u9002\u5f53\u6743\u9650\u65f6\u51fa\u73b0\u4eba\u4e3a\u9519\u8bef\u7684\u98ce\u9669\u3002MAC \u901a\u8fc7\u57fa\u4e8e\u9884\u5b9a\u4e49\u7b56\u7565\u81ea\u52a8\u6267\u884c\u8bbf\u95ee\u63a7\u5236\u6765\u6700\u5927\u9650\u5ea6\u5730\u964d\u4f4e\u8fd9\u79cd\u98ce\u9669\u3002<\/p>\n<\/li>\n

    4. \n

      \u9632\u8303\u5185\u90e8\u5a01\u80c1<\/strong>\uff1aMAC \u5728\u9632\u8303\u5185\u90e8\u5a01\u80c1\u65b9\u9762\u7279\u522b\u6709\u7528\uff0c\u56e0\u4e3a\u7528\u6237\u65e0\u6cd5\u4fee\u6539\u5176\u5b89\u5168\u8bb8\u53ef\u8303\u56f4\u4e4b\u5916\u7684\u8d44\u6e90\u7684\u8bbf\u95ee\u6743\u9650\u3002<\/p>\n<\/li>\n<\/ol>\n

      \u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u7c7b\u578b<\/h2>\n

      \u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u6709\u591a\u79cd\u7c7b\u578b\uff0c\u6bcf\u79cd\u7c7b\u578b\u90fd\u6709\u5176\u7279\u70b9\u548c\u5b9e\u73b0\u65b9\u5f0f\u3002\u6700\u5e38\u89c1\u7684\u7c7b\u578b\u5305\u62ec\uff1a<\/p>\n\n\n\n\n\n\n\n\n
      \u7c7b\u578b<\/th>\n\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n
      \u53ef\u81ea\u7531\u652f\u914d\u7684\u73b0\u91d1\u6d41 (DMAC)<\/strong><\/td>\n\u7ed3\u5408 MAC \u548c DAC \u7684\u5143\u7d20\uff0c\u5141\u8bb8\u6709\u9650\u7684\u7528\u6237\u5728\u9884\u5b9a\u4e49\u8303\u56f4\u5185\u63a7\u5236\u8bbf\u95ee\u6743\u9650\u3002<\/td>\n<\/tr>\n
      \u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236 (RBAC)<\/strong><\/td>\n\u5c06\u7528\u6237\u7ec4\u7ec7\u6210\u89d2\u8272\u5e76\u6839\u636e\u89d2\u8272\u7684\u804c\u8d23\u5206\u914d\u6743\u9650\u3002<\/td>\n<\/tr>\n
      \u57fa\u4e8e\u5c5e\u6027\u7684\u8bbf\u95ee\u63a7\u5236 (ABAC)<\/strong><\/td>\n\u8bbf\u95ee\u51b3\u7b56\u57fa\u4e8e\u7528\u6237\u3001\u8d44\u6e90\u548c\u73af\u5883\u7684\u5c5e\u6027\uff0c\u4ece\u800c\u5141\u8bb8\u66f4\u7ec6\u7c92\u5ea6\u7684\u63a7\u5236\u3002<\/td>\n<\/tr>\n
      \u591a\u7ea7\u5b89\u5168 (MLS)<\/strong><\/td>\n\u5904\u7406\u5177\u6709\u4e0d\u540c\u5b89\u5168\u7ea7\u522b\u7684\u8d44\u6e90\u5e76\u9632\u6b62\u5b83\u4eec\u4e4b\u95f4\u7684\u4fe1\u606f\u6cc4\u9732\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      \u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u95ee\u9898\u53ca\u5176\u89e3\u51b3\u65b9\u6848<\/h2>\n

      \u5728\u4ee3\u7406\u670d\u52a1\u5668\u63d0\u4f9b\u5546 OneProxy \u7684\u7f51\u7ad9\u4e0a\u5b9e\u65bd\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u5728\u5b89\u5168\u6027\u548c\u9690\u79c1\u65b9\u9762\u5177\u6709\u8bb8\u591a\u4f18\u52bf\u3002\u7136\u800c\uff0c\u4e5f\u53ef\u80fd\u5b58\u5728\u4e00\u4e9b\u6311\u6218\uff1a<\/p>\n

      1.\u5b9e\u65bd\u7684\u590d\u6742\u6027<\/strong>\uff1aMAC \u7684\u5b9e\u65bd\u53ef\u80fd\u5f88\u590d\u6742\uff0c\u5c24\u5176\u662f\u5728\u6700\u521d\u6ca1\u6709\u4e3a\u5176\u8bbe\u8ba1\u7684\u73b0\u6709\u7cfb\u7edf\u4e2d\u3002\u9002\u5f53\u7684\u89c4\u5212\u548c\u4e0e\u73b0\u6709\u57fa\u7840\u8bbe\u65bd\u7684\u96c6\u6210\u81f3\u5173\u91cd\u8981\u3002<\/p>\n

      2. \u884c\u653f\u7ba1\u7406\u8d39\u7528<\/strong>\uff1a\u96c6\u4e2d\u63a7\u5236\u9700\u8981\u4ed4\u7ec6\u7ba1\u7406\u548c\u7ef4\u62a4\u5b89\u5168\u6807\u7b7e\u3001\u8bb8\u53ef\u548c\u653f\u7b56\u3002\u53ef\u80fd\u9700\u8981\u9891\u7e41\u66f4\u65b0\u4ee5\u9002\u5e94\u4e0d\u65ad\u53d8\u5316\u7684\u5b89\u5168\u8981\u6c42\u3002<\/p>\n

      3. \u517c\u5bb9\u6027\u95ee\u9898<\/strong>\uff1a\u5c06 MAC \u4e0e\u67d0\u4e9b\u5e94\u7528\u7a0b\u5e8f\u6216\u65e7\u7cfb\u7edf\u96c6\u6210\u53ef\u80fd\u4f1a\u5e26\u6765\u517c\u5bb9\u6027\u6311\u6218\u3002\u53ef\u80fd\u9700\u8981\u5b9a\u5236\u6216\u4e2d\u95f4\u4ef6\u89e3\u51b3\u65b9\u6848\u6765\u89e3\u51b3\u8fd9\u4e9b\u95ee\u9898\u3002<\/p>\n

      4. \u5e73\u8861\u5b89\u5168\u6027\u548c\u53ef\u7528\u6027<\/strong>\uff1a\u5728\u4e25\u683c\u7684\u5b89\u5168\u6027\u548c\u53ef\u7528\u6027\u4e4b\u95f4\u53d6\u5f97\u5e73\u8861\u81f3\u5173\u91cd\u8981\u3002\u8fc7\u5ea6\u4e25\u683c\u7684\u8bbf\u95ee\u63a7\u5236\u53ef\u80fd\u4f1a\u5f71\u54cd\u751f\u4ea7\u529b\uff0c\u800c\u677e\u6563\u7684\u63a7\u5236\u53ef\u80fd\u4f1a\u5371\u53ca\u5b89\u5168\u6027\u3002<\/p>\n

      \u4e3a\u4e86\u5e94\u5bf9\u8fd9\u4e9b\u6311\u6218\uff0cOneProxy \u5e94\u8fdb\u884c\u5168\u9762\u7684\u5b89\u5168\u8bc4\u4f30\uff0c\u8bc6\u522b\u5173\u952e\u8d44\u6e90\u5e76\u4ed4\u7ec6\u5b9a\u4e49\u8bbf\u95ee\u7b56\u7565\u3002\u5e94\u5b9a\u671f\u8fdb\u884c\u5ba1\u8ba1\u548c\u76d1\u63a7\uff0c\u4ee5\u786e\u4fdd\u6301\u7eed\u7684\u5b89\u5168\u6027\u548c\u5408\u89c4\u6027\u3002<\/p>\n

      \u4e3b\u8981\u7279\u70b9\u53ca\u5176\u4ed6\u4e0e\u540c\u7c7b\u4ea7\u54c1\u7684\u6bd4\u8f83<\/h2>\n

      \u4ee5\u4e0b\u662f\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u4e0e\u5176\u4ed6\u8bbf\u95ee\u63a7\u5236\u673a\u5236\u7684\u6bd4\u8f83\uff1a<\/p>\n\n\n\n\n\n\n\n\n\n
      \u7279\u5f81<\/th>\n\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236<\/th>\n\u81ea\u4e3b\u8bbf\u95ee\u63a7\u5236 (DAC)<\/th>\n\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236 (RBAC)<\/th>\n<\/tr>\n<\/thead>\n
      \u63a7\u5236\u539f\u7406<\/strong><\/td>\n\u96c6\u4e2d\u63a7\u5236<\/td>\n\u7528\u6237\u63a7\u5236\u8bbf\u95ee<\/td>\n\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee<\/td>\n<\/tr>\n
      \u8bbf\u95ee\u51b3\u7b56\u8005<\/strong><\/td>\n\u5b89\u5168\u5185\u6838<\/td>\n\u8d44\u6e90\u62e5\u6709\u8005\uff08\u7528\u6237\uff09<\/td>\n\u89d2\u8272\u5206\u914d<\/td>\n<\/tr>\n
      \u63a7\u5236\u7c92\u5ea6<\/strong><\/td>\n\u7ec6\u7c92\u5ea6\u63a7\u5236<\/td>\n\u7c97\u7c92\u5ea6\u63a7\u5236<\/td>\n\u9002\u5ea6\u63a7\u5236<\/td>\n<\/tr>\n
      \u7075\u6d3b\u6027<\/strong><\/td>\n\u7075\u6d3b\u6027\u8f83\u5dee<\/td>\n\u66f4\u52a0\u7075\u6d3b<\/td>\n\u9002\u5ea6\u7075\u6d3b<\/td>\n<\/tr>\n
      \u590d\u6742<\/strong><\/td>\n\u9ad8\u590d\u6742\u5ea6<\/td>\n\u4f4e\u590d\u6742\u5ea6<\/td>\n\u4e2d\u7b49\u590d\u6742\u5ea6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      \u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u672a\u6765\u524d\u666f\u548c\u6280\u672f<\/h2>\n

      \u968f\u7740\u6280\u672f\u8fdb\u6b65\uff0c\u4eba\u4eec\u5bf9\u5b89\u5168\u95ee\u9898\u7684\u5173\u6ce8\u5ea6\u4e0d\u65ad\u63d0\u9ad8\uff0c\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u672a\u6765\u524d\u666f\u4e00\u7247\u5149\u660e\u3002\u673a\u5668\u5b66\u4e60\u548c\u4eba\u5de5\u667a\u80fd\u7b49\u65b0\u5174\u6280\u672f\u53ef\u80fd\u4f1a\u96c6\u6210\u5230 MAC \u4e2d\uff0c\u4ee5\u589e\u5f3a\u5a01\u80c1\u68c0\u6d4b\u548c\u81ea\u9002\u5e94\u8bbf\u95ee\u63a7\u5236\u3002\u6b64\u5916\uff0c\u786c\u4ef6\u5b89\u5168\u6a21\u5757\u548c\u53ef\u4fe1\u5e73\u53f0\u6a21\u5757\u7684\u8fdb\u6b65\u53ef\u4ee5\u589e\u5f3a\u5b89\u5168\u5185\u6838\u7684\u5f3a\u5ea6\uff0c\u4ece\u800c\u8fdb\u4e00\u6b65\u63d0\u9ad8 MAC \u7684\u529f\u6548\u3002<\/p>\n

      \u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u5173\u8054<\/h2>\n

      \u4ee3\u7406\u670d\u52a1\u5668\u5728\u589e\u5f3a Web \u7528\u6237\u7684\u5b89\u5168\u6027\u548c\u9690\u79c1\u6027\u65b9\u9762\u53d1\u6325\u7740\u81f3\u5173\u91cd\u8981\u7684\u4f5c\u7528\u3002\u4e0e\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u76f8\u7ed3\u5408\u65f6\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u63d0\u4f9b\u989d\u5916\u7684\u4fdd\u62a4\u5c42\uff0c\u9632\u6b62\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002\u4f5c\u4e3a\u4ee3\u7406\u670d\u52a1\u5668\u63d0\u4f9b\u5546\uff0cOneProxy \u53ef\u4ee5\u5229\u7528 MAC \u6765\u9650\u5236\u5bf9\u5176\u7ba1\u7406\u9762\u677f\u3001\u7528\u6237\u6570\u636e\u548c\u5176\u4ed6\u654f\u611f\u8d44\u6e90\u7684\u8bbf\u95ee\u3002\u901a\u8fc7\u5e94\u7528 MAC \u539f\u5219\uff0cOneProxy \u53ef\u4ee5\u786e\u4fdd\u53ea\u6709\u6388\u6743\u4eba\u5458\u624d\u80fd\u7ba1\u7406\u4ee3\u7406\u57fa\u7840\u8bbe\u65bd\uff0c\u4ece\u800c\u964d\u4f4e\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u548c\u6570\u636e\u6cc4\u9732\u7684\u98ce\u9669\u3002<\/p>\n

      \u76f8\u5173\u94fe\u63a5<\/h2>\n

      \u6709\u5173\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bfb\u8005\u53ef\u4ee5\u63a2\u7d22\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n

        \n
      1. \u7f8e\u56fd\u56fd\u5bb6\u6807\u51c6\u4e0e\u6280\u672f\u7814\u7a76\u9662 (NIST) \u7279\u522b\u51fa\u7248\u7269 800-162<\/a><\/li>\n
      2. \u53ef\u4fe1\u8ba1\u7b97\u673a\u7cfb\u7edf\u8bc4\u4f30\u6807\u51c6\uff08\u6a59\u76ae\u4e66\uff09<\/a> \uff08\u7f8e\u56fd\u56fd\u5bb6\u6807\u51c6\u4e0e\u6280\u672f\u7814\u7a76\u9662\uff09<\/li>\n
      3. \u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236 (RBAC)<\/a> \uff08\u7f8e\u56fd\u56fd\u5bb6\u6807\u51c6\u4e0e\u6280\u672f\u7814\u7a76\u9662\uff09<\/li>\n
      4. \u57fa\u4e8e\u5c5e\u6027\u7684\u8bbf\u95ee\u63a7\u5236 (ABAC)<\/a> \uff08\u7f8e\u56fd\u56fd\u5bb6\u6807\u51c6\u4e0e\u6280\u672f\u7814\u7a76\u9662\uff09<\/li>\n<\/ol>\n

        \u603b\u4e4b\uff0c\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u662f\u4e00\u79cd\u5f3a\u5927\u7684\u5b89\u5168\u673a\u5236\uff0c\u53ef\u63d0\u4f9b\u96c6\u4e2d\u63a7\u5236\u548c\u5f3a\u5927\u7684\u4fdd\u62a4\u4ee5\u9632\u6b62\u672a\u7ecf\u6388\u6743\u7684\u8bbf\u95ee\u3002\u901a\u8fc7\u5728\u4ee3\u7406\u670d\u52a1\u5668\u63d0\u4f9b\u5546 OneProxy \u7684\u7f51\u7ad9\u4e0a\u5b9e\u65bd MAC\uff0c\u7ec4\u7ec7\u53ef\u4ee5\u589e\u5f3a\u5176\u5b89\u5168\u6001\u52bf\u5e76\u6709\u6548\u4fdd\u62a4\u654f\u611f\u8d44\u6e90\u548c\u7528\u6237\u6570\u636e\u3002\u968f\u7740\u5b89\u5168\u6280\u672f\u7684\u4e0d\u65ad\u8fdb\u6b65\uff0c\u5f3a\u5236\u8bbf\u95ee\u63a7\u5236\u5728\u4e0d\u65ad\u53d1\u5c55\u7684\u6570\u5b57\u73af\u5883\u4e2d\u524d\u666f\u5149\u660e\u3002<\/p>","protected":false},"featured_media":477954,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477953","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Mandatory Access Control for the Website of the Proxy Server Provider OneProxy (oneproxy.pro)<\/mark>","faq_items":[{"question":"What is Mandatory Access Control (MAC)?","answer":"

        Mandatory Access Control (MAC) is a security mechanism used in computer systems to enforce restrictions on resource access based on predefined rules and policies. Unlike discretionary access control (DAC), where resource owners determine access permissions, MAC ensures that access decisions are made centrally by the system administrator.<\/p>"},{"question":"How did Mandatory Access Control originate?","answer":"

        The concept of Mandatory Access Control emerged in the early days of computer security and was formally introduced by the United States Department of Defense (DoD) in the 1970s. The Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, outlined the criteria for evaluating computer security in government systems and introduced different security levels with mandatory controls.<\/p>"},{"question":"How does Mandatory Access Control work?","answer":"

        Mandatory Access Control operates by assigning security labels to resources and subjects in the system. These labels contain information about sensitivity levels and integrity. Users are assigned security clearances based on their roles and responsibilities. The security kernel, a core component of the operating system, enforces access control policies, ensuring that access requests comply with defined rules.<\/p>"},{"question":"What are the key features of Mandatory Access Control?","answer":"

        MAC offers several key features, including centralized control, strong security model, minimization of human error, and protection against insider threats. It allows system administrators to manage access permissions centrally, preventing unauthorized access to sensitive resources and reducing the risk of human error.<\/p>"},{"question":"What types of Mandatory Access Control exist?","answer":"

        There are several types of MAC, including Discretionary MAC (DMAC), Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Multi-Level Security (MLS). Each type has its characteristics and implementations, providing various levels of control.<\/p>"},{"question":"How can MAC be used in OneProxy's website?","answer":"

        OneProxy, as a proxy server provider, can use Mandatory Access Control to restrict access to its administrative panel, user data, and other sensitive resources. By applying MAC principles, OneProxy ensures that only authorized personnel can manage the proxy infrastructure, enhancing security and privacy for its users.<\/p>"},{"question":"What are the potential challenges when using Mandatory Access Control?","answer":"

        Implementing MAC can be complex, especially in existing systems not initially designed for it. Careful planning and integration with the existing infrastructure are crucial. Additionally, balancing stringent security with usability and addressing compatibility issues may pose challenges.<\/p>"},{"question":"How does MAC compare with other access control mechanisms?","answer":"

        When compared to other access control mechanisms like Discretionary Access Control (DAC) and Role-Based Access Control (RBAC), MAC offers centralized control, fine-grained access control, and high complexity. It provides a more stringent and secure access control model.<\/p>"},{"question":"What does the future hold for Mandatory Access Control?","answer":"

        The future of Mandatory Access Control looks promising, with potential integration of emerging technologies such as Machine Learning and Artificial Intelligence to enhance threat detection and adaptive access control. Advancements in hardware security modules and Trusted Platform Modules may further bolster the efficacy of MAC.<\/p>"},{"question":"How does MAC enhance online security?","answer":"

        By implementing Mandatory Access Control, OneProxy's website ensures a robust security posture, safeguarding sensitive resources and user data against unauthorized access. MAC, combined with proxy servers, provides an additional layer of protection, enhancing online safety and control.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/477953\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/477954"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=477953"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}