A Novel Multi-level Security Policy Model for Protecting Documents

Insider threat is widely recognized as an utmost important issue for organization security management. Documents are often considered as the most important information assets so that they will be the chief target of insider misuse. The former coarse grained security policies, such as "the principle of least privilege" and "separate of duty", are not enough to address insider threat for security of documents. In this paper, we present a novel multi-level security policy model and related algorithms on information flow of documents. With different system context, it will generate dynamic restrictions on information flow, and prohibit probable hidden channels of information flow.