Methods and systems for intelligently generating and inspecting mandatory access control policies.

Abstract

This invention provides a method and system for intelligently generating and checking mandatory access control policies. It intelligently generates mandatory access control policies based on blocking attack paths, analyzes system vulnerabilities, takes the corresponding attack paths as input, and outputs mandatory access control policies that block these attack paths. Alternatively, it checks the security of manually written policies based on a security model, inputting manually written policies into the system, analyzing the policies according to the security model, and outputting policies that violate the security model. This improves the efficiency and effectiveness of writing mandatory access control policies. By intelligently generating mandatory access control policies that effectively protect the system, it avoids developers from writing policies that violate access control principles due to insufficient knowledge or experience.

Description

Technical Field

[0001] This invention relates to the field of driver assistance technology, and in particular to a method and system for intelligently generating mandatory access control strategies and inspection strategies. Background Technology

[0002] Mandatory access control (MACC) is a common and effective security mechanism in system security, effectively mitigating zero-day vulnerabilities and reducing the harm caused by privilege escalation. By writing policies, strict restrictions are placed on process access to resources, thereby effectively protecting sensitive system resources. The effectiveness and security of these policies depend on the policy writers' mastery of security knowledge and their understanding of the system framework and business logic, thus requiring a high level of skill. Ordinary software developers also need to write policies to grant necessary resource access permissions to their applications / processes. If ordinary software engineers lack the necessary security knowledge, they may assign excessively high privileges to the processes they are responsible for, increasing the security risks of system intrusion and privilege escalation. Therefore, a method is needed that can intelligently generate highly effective mandatory access control policies while also performing security checks on manually written policies. Summary of the Invention

[0003] To address the aforementioned technical problems, this invention proposes a method and system for intelligently generating and inspecting mandatory access control policies. By analyzing existing system vulnerabilities and using the corresponding attack paths as input, the system outputs mandatory access control policies that block these attack paths, preventing vulnerability exploitation. For manually written policies, the system inputs the policy and analyzes it according to a security model, outputting policies that violate the model. This improves the efficiency and effectiveness of mandatory access control policy development. The policy inspection module can be used to detect policies manually written by personnel lacking security knowledge, preventing the granting of access to sensitive resources to unnecessary processes.

[0004] Specifically, the method for intelligently generating mandatory access control policies and checking policies according to the present invention includes:

[0005] Based on blocking attack paths, a mandatory access control policy is intelligently generated. The system analyzes the vulnerabilities, takes the attack paths corresponding to the vulnerabilities as input, and outputs mandatory access control policies that block the attack paths.

[0006] And / or check the security of manually written policies based on the security model. Input the manually written policies into the system, analyze the policies according to the security model, and output the policies that violate the security model.

[0007] Furthermore, the method of intelligently generating mandatory access control policies to block attack paths also includes the following steps:

[0008] S11: Collect the system vulnerability database and corresponding attack paths, perform vulnerability scanning on the system, and obtain a list of vulnerabilities in the system;

[0009] S12: Collect attack paths that can lead to the exploitation of vulnerabilities, input the vulnerability list into the vulnerability analysis module, check whether there are exploitable methods for each vulnerability, and collect the attack paths corresponding to each exploitation method.

[0010] S13: Resource access operation generation strategy based on attack path. Identify resource access operations on the attack path of each vulnerability exploitation method, generate mandatory access control policies to block these resource access operations, and interrupt the attack path.

[0011] Furthermore, the security check of manually written policies based on the security model also includes the following steps:

[0012] S21: Select the safety model based on the type of product;

[0013] S22: Determine whether the manually written policy allows the process to perform illegal operations on sensitive resources based on the security model. If it does, proceed to S23; if not, continue accessing. Continue to determine whether the manually written policy assigns special types with high privileges to processes that are not allowed to be assigned. If so, proceed to S23; otherwise, continue to the next policy check.

[0014] S23: Record the inspection results, describe the specific reasons for illegal operation policies or processes that are not allowed to be assigned, and generate a final inspection report.

[0015] The final inspection report records information that does not match the security model, including process information of illegal operations on sensitive resources and process allocation errors.

[0016] As another preferred embodiment, the present invention also provides a system for intelligently generating and checking mandatory access control policies, comprising at least: an automatic generation module for mandatory access control policies and a module for checking manually written policies;

[0017] The automatic generation of mandatory access control policy module intelligently generates mandatory access control policies based on blocking attack paths. It analyzes the vulnerabilities in the system, takes the attack paths corresponding to the vulnerabilities as input, and outputs mandatory access control policies that block the attack paths.

[0018] The module for checking manually written strategies checks the security of manually written strategies based on a security model. It inputs the manually written strategies into the system, analyzes the strategies according to the security model, and outputs strategies that violate the security model.

[0019] Furthermore, the automatic generation of mandatory access control policy module also includes:

[0020] The vulnerability scanning module performs a vulnerability scan on the system and obtains a list of existing vulnerabilities.

[0021] The vulnerability analysis module takes a vulnerability list as input, analyzes the vulnerabilities existing in the system, finds the exploit methods for each vulnerability, and outputs the attack path corresponding to the exploit methods.

[0022] The policy generation module identifies resource access operations in each attack path and generates mandatory access control policies that deny these operations.

[0023] Furthermore, the inspection module for manually written strategies also includes:

[0024] Security model database, input security module rules, create corresponding security modules, and switch the corresponding security model according to the product type;

[0025] The policy inspector takes a manually written policy as input, performs a matching analysis based on the selected security model, and identifies policies that violate the security model.

[0026] The report generator outputs a visual report containing illegal operation policies or processes that are not allowed to be assigned, along with the corresponding error reasons.

[0027] The security model database further includes: a security model pre-built according to requirements and stored in the security model database. When a security model is selected, it is searched and retrieved in the security model database. If the search result is no matching security model, a new security model is reconstructed and updated in the security model database. The security model database automatically updates real-time data within a preset time period.

[0028] The policy checker also includes:

[0029] Based on the security model, determine whether the manually written policy allows the process to perform illegal operations on sensitive resources. If allowed, record the output result; if not allowed, continue accessing. Then, determine whether the manually written policy assigns special types with high privileges to processes that are not allowed to be assigned. If so, record the check result; otherwise, continue to the next policy check.

[0030] In summary, this invention provides a method and system for intelligently generating and checking mandatory access control policies. By intelligently generating mandatory access control policies based on blocking attack paths, it analyzes vulnerabilities in the system, takes the corresponding attack paths as input, and outputs mandatory access control policies that block these attack paths. Alternatively, it checks the security of manually written policies based on a security model, inputting manually written policies into the system, analyzing the policies according to the security model, and outputting policies that violate the security model. This improves the efficiency and effectiveness of writing mandatory access control policies. By intelligently generating mandatory access control policies that can effectively protect the system, it avoids developers from writing policies that violate access control principles due to insufficient knowledge or experience. Attached Figure Description

[0031] Figure 1 This is a flowchart illustrating the intelligent generation of mandatory access control policies based on blocking attack paths as described in this invention.

[0032] Figure 2 This is a flowchart illustrating the security check of manually written strategies based on a security model, as described in this invention. Detailed Implementation

[0033] To enable those skilled in the art to better understand the present invention, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0034] The present invention provides a method for intelligently generating and checking mandatory access control policies, comprising:

[0035] Based on blocking attack paths, a mandatory access control policy is intelligently generated. The system analyzes the vulnerabilities, takes the attack paths corresponding to the vulnerabilities as input, and outputs mandatory access control policies that block the attack paths.

[0036] And / or check the security of manually written policies based on the security model. Input the manually written policies into the system, analyze the policies according to the security model, and output the policies that violate the security model.

[0037] Furthermore, the blocking attack path intelligently generates mandatory access control policies, such as... Figure 1 As shown, it also includes the following steps:

[0038] S11: Collect the system vulnerability database and corresponding attack paths, perform vulnerability scanning on the system, and obtain a list of vulnerabilities in the system;

[0039] Furthermore, a crawler is used to extract system vulnerability databases and corresponding attack paths from existing cloud data to obtain the latest vulnerabilities of commonly used in-vehicle operating systems (such as Linux and Android). These vulnerabilities are then added to the vulnerability scanning module, which scans the in-vehicle operating system to obtain a list of vulnerabilities.

[0040] S12: Collect attack paths that can lead to the exploitation of vulnerabilities, input the vulnerability list into the vulnerability analysis module, check whether there are exploitable methods for each vulnerability, and collect the attack paths corresponding to each exploitation method.

[0041] Furthermore, by collecting the attack paths that could lead to the exploitation of vulnerabilities, we can identify all resource access operations from these attack paths, such as reading / writing system configuration files and modifying security policies.

[0042] S13: Resource access operation generation strategy based on attack path. Identify resource access operations on the attack path of each vulnerability exploitation method, generate mandatory access control policies to block these resource access operations, and interrupt the attack path.

[0043] Furthermore, the resource access operations, such as copying user personal data, replacing key files, and tampering with system security configurations, are prevented by generating mandatory access control policies, thus interrupting the attack path and rendering the attack method ineffective.

[0044] Furthermore, the security of manually written policies is checked based on the security model, such as... Figure 2 As shown, it also includes the following steps:

[0045] S21: Select the safety model based on the type of product;

[0046] S22: Determine whether the manually written policy allows the process to perform illegal operations on sensitive resources based on the security model. If it does, proceed to S23; if not, continue accessing. Continue to determine whether the manually written policy assigns special types with high privileges to processes that are not allowed to be assigned. If so, proceed to S23; otherwise, continue to the next policy check.

[0047] S23: Record the inspection results, describe the specific reasons for illegal operation policies or processes that are not allowed to be assigned, and generate a final inspection report.

[0048] The final inspection report records information that does not match the security model, including process information of illegal operations on sensitive resources and process allocation errors.

[0049] By intelligently generating mandatory access control policies that can effectively protect the system, developers are prevented from writing policies that violate access control principles due to insufficient knowledge and experience. This improves the efficiency and effectiveness of writing mandatory access control policies. The policy inspection module detects policies manually written by personnel lacking security knowledge, thereby preventing the granting of access permissions to sensitive resources to unnecessary processes.

[0050] As another preferred embodiment, the present invention also provides a system for intelligently generating and checking mandatory access control policies, comprising at least: an automatic generation module for mandatory access control policies and a module for checking manually written policies;

[0051] The automatic generation of mandatory access control policy module intelligently generates mandatory access control policies based on blocking attack paths. It analyzes the vulnerabilities in the system, takes the attack paths corresponding to the vulnerabilities as input, and outputs mandatory access control policies that block the attack paths.

[0052] The module for checking manually written strategies checks the security of manually written strategies based on a security model. It inputs the manually written strategies into the system, analyzes the strategies according to the security model, and outputs strategies that violate the security model.

[0053] Furthermore, the automatic generation of mandatory access control policy module also includes:

[0054] The vulnerability scanning module performs a vulnerability scan on the system and obtains a list of existing vulnerabilities.

[0055] The vulnerability analysis module takes a vulnerability list as input, analyzes the vulnerabilities existing in the system, finds the exploit methods for each vulnerability, and outputs the attack path corresponding to the exploit methods.

[0056] The policy generation module identifies resource access operations in each attack path and generates mandatory access control policies that deny these operations.

[0057] Furthermore, the inspection module for manually written strategies also includes:

[0058] The security model database allows users to input security module rules, create corresponding security modules, and switch between security models based on the product type.

[0059] The policy inspector takes a manually written policy as input, performs a matching analysis based on the selected security model, and identifies policies that violate the security model.

[0060] The report generator outputs a visual report containing illegal operation policies or processes that are not allowed to be assigned, along with the corresponding error reasons.

[0061] The security model database further includes: a security model pre-built according to requirements and stored in the security model database. When a security model is selected, it is searched and retrieved in the security model database. If the search result is no matching security model, a new security model is reconstructed and updated in the security model database. The security model database automatically updates real-time data within a preset time period.

[0062] The policy checker further includes: determining, based on the security model, whether the manually written policy allows the process to perform illegal operations on sensitive resources; if allowed, recording the output result; if not allowed, continuing access; and further determining whether the manually written policy assigns special types with high privileges to processes that are not allowed to be assigned; if so, recording the check result; otherwise, continuing to the next policy check.

[0063] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.

Claims

1. A method for intelligently generating mandatory access control policies and inspection policies, characterized in that, include: Based on blocking attack paths, a mandatory access control policy is intelligently generated. The system analyzes the vulnerabilities, takes the attack paths corresponding to the vulnerabilities as input, and outputs mandatory access control policies that block the attack paths. The security of manually written policies is checked based on the security model. The manually written policies are input into the system, analyzed according to the security model, and policies that violate the security model are output. The method for intelligently generating mandatory access control policies based on blocking attack paths also includes the following steps: S11: Collect the system vulnerability database and corresponding attack paths, perform vulnerability scanning on the system, and obtain a list of vulnerabilities in the system; S12: Collect attack paths that can lead to the exploitation of vulnerabilities, input the vulnerability list into the vulnerability analysis module, check whether there are exploitable methods for each vulnerability, and collect the attack paths corresponding to each exploitation method. S13: Resource access operation generation strategy based on attack path, identify resource access operations on the attack path of each vulnerability exploitation method, generate mandatory access control policies to block these resource access operations, and interrupt the attack path; The security check of manually written policies based on the security model also includes the following steps: S21: Select the safety model based on the type of product; S22: Determine whether the manually written policy allows the process to perform illegal operations on sensitive resources based on the security model. If it does, proceed to S23; if not, continue accessing. Continue to determine whether the manually written policy assigns special types with high privileges to processes that are not allowed to be assigned. If so, proceed to S23; otherwise, continue to the next policy check. S23: Record the inspection results, describe the specific reasons for illegal operation strategies or processes that are not allowed to be assigned, and generate a final inspection report; Specifically, the security model is pre-built according to requirements and stored in the security model database. When the security model is selected, it is searched for and retrieved from the security model database.

2. The method for intelligently generating mandatory access control policies and checking policies according to claim 1, characterized in that, The security model is a security model that is pre-built according to requirements and stored in the security model database. When a security model is selected, it is searched and called in the security model database. If the search result is no matching security model, a new security model is reconstructed and updated in the security model database. The security model database automatically updates real-time data within a preset time period.

3. The method for intelligently generating mandatory access control policies and checking policies according to claim 2, characterized in that, The final inspection report records information that does not match the security model, including process information of illegal operations on sensitive resources and process allocation errors.

4. A system for intelligently generating mandatory access control policies and inspection policies, characterized in that, At least including: Automatically generate mandatory access control policy modules and check manually written policy modules; The automatic generation of mandatory access control policy module intelligently generates mandatory access control policies based on blocking attack paths. It analyzes the vulnerabilities in the system, takes the attack paths corresponding to the vulnerabilities as input, and outputs mandatory access control policies that block the attack paths. The module for checking manually written strategies checks the security of manually written strategies based on a security model. It inputs the manually written strategies into the system, analyzes the strategies according to the security model, and outputs strategies that violate the security model. The method for intelligently generating mandatory access control policies based on blocking attack paths also includes the following steps: S11: Collect the system vulnerability database and corresponding attack paths, perform vulnerability scanning on the system, and obtain a list of vulnerabilities in the system; S12: Collect attack paths that can lead to the exploitation of vulnerabilities, input the vulnerability list into the vulnerability analysis module, check whether there are exploitable methods for each vulnerability, and collect the attack paths corresponding to each exploitation method. S13: Resource access operation generation strategy based on attack path, identify resource access operations on the attack path of each vulnerability exploitation method, generate mandatory access control policies to block these resource access operations, and interrupt the attack path; The security check of manually written policies based on the security model also includes the following steps: S21: Select the safety model based on the type of product; S22: Determine whether the manually written policy allows the process to perform illegal operations on sensitive resources based on the security model. If it does, proceed to S23; if not, continue accessing. Continue to determine whether the manually written policy assigns special types with high privileges to processes that are not allowed to be assigned. If so, proceed to S23; otherwise, continue to the next policy check. S23: Record the inspection results, describe the specific reasons for illegal operation strategies or processes that are not allowed to be assigned, and generate a final inspection report; Specifically, the security model is pre-built according to requirements and stored in the security model database. When the security model is selected, it is searched for and retrieved from the security model database.

5. The system according to claim 4, characterized in that, The automatic generation of mandatory access control policies module also includes: The vulnerability scanning module performs vulnerability scanning on the system and obtains a list of vulnerabilities present in the system. The vulnerability analysis module takes a vulnerability list as input, analyzes the vulnerabilities existing in the system, finds the exploit methods for each vulnerability, and outputs the attack path corresponding to the exploit methods. The policy generation module identifies resource access operations in each attack path and generates mandatory access control policies that deny these operations.

6. The system according to claim 5, characterized in that, The module for checking manually written strategies also includes: The security model database allows for the input of security module rules, the creation of corresponding security modules, and the switching of the corresponding security model based on the product type. The policy inspector takes a manually written policy as input, performs a matching analysis based on the selected security model, and identifies policies that violate the security model. The report generator outputs a visual report containing illegal operation policies or processes that are not allowed to be assigned, along with the corresponding error reasons.

7. The system according to claim 6, characterized in that, The security model database further includes: when the security model is selected, searching and calling the security model database; if the search result is no matching security model, reconstructing a new security model and updating it to the security model database; the security model database automatically updates real-time data within a preset time period.

8. The system according to claim 7, characterized in that, The policy checker also includes: Based on the security model, determine whether the manually written policy allows the process to perform illegal operations on sensitive resources. If allowed, record the output result; if not allowed, continue accessing. Then, determine whether the manually written policy assigns special types with high privileges to processes that are not allowed to be assigned. If so, record the check result; otherwise, continue to the next policy check.

Images