A policy-based security model for Web system

The browser/server-based software development model is a popular way to for the application on the Internet. Thus, there are more and more software systems based on this framework, such as electronic commerce, electronic government, management information system. However, the security becomes the key factor to the application system on Web. Security policy is the bedrock to implement system security in variable circumstances. In this paper, we try to create a method to measure security degree by some tools such as fuzzy assessment and graph theory, then stipulate for security policy. This method provides a new way to analyse system security. This policy-based security model for Web application improves the adaptability and evolvement of secure system.