在信息安全标准中,高安全级别系统都要求采用形式化安全模型来描述系统安全策略,并且是可验证的。安全模型是信息安全理论研究的基础,也是开发高安全级别系统不可缺少的形式化描述和验证技术。人们提出了各种信息安全模型,它们大致可以分成访问控制模型、信息流型、信息完整性模型和分布式应用模型等。 In information security standards, high-security-level systems require a formalized security model to describe system security policies and are verifiable. Security model is the basis of information security theory research, but also the development of high security level system is an indispensable formal description and verification technology. People put forward various information security models, which can be roughly divided into access control model, information flow model, information integrity model and distributed application model.