Abstract:

Traditional authorization and authentication solves the problem of trust of user identify, but not solves the problem of trust of user behavior. Therefore, the paper proposed a new trustworthy model based on user behavior so as to meet the needs of security systems. In this model, users of network service are regarded as subjects, and files and data in computer are regarded as objects. Different subjects and objects are assigned to different levels of confidentiality and integrity. A user' service request on system is mapped into the access from a subject to an object. In this model, security attributes and security strategies and rules used to restrict users' behavior are all defined. Hence, a security and trustworthy computer system is made up.

Key words: user behavior;trust;security attribute;security strategy;rule