Abstract: Aiming to achieve the goal of multi-level security to desktop virtualization in classified environment, a new model vDesktop-BLP is proposed. The model which improves the classical BLP model can control path of information flow in desktop virtualization and realize the control of network communication between virtual desktops and access behaviors to storage devices based on principles of multi-level security in classified environment. Afterwards, a prototype system is implemented to verify the feasibility and effectiveness design of vDesktop-BLP.

Key words: desktop virtualization, classified environment, multi-level security