LEAST PRIVILEGE IN SEPARATION KERNELS
Timothy E. Levin, Cynthia E. Irvine, Thuy D. Nguyen
2006
Abstract
We extend the separation kernel abstraction to represent the enforcement of the principle of least privilege. In addition to the inter-block flow control policy prescribed by the traditional separation kernel paradigm, we describe an orthogonal, finer-grained flow control policy by extending the protection of elements to subjects and resources, as well as blocks, within a partitioned system. We show how least privilege applied to the actions of subjects provides enhanced protection for secure systems.
DownloadPaper Citation
in Harvard Style
E. Levin T., E. Irvine C. and D. Nguyen T. (2006). LEAST PRIVILEGE IN SEPARATION KERNELS . In Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2006) ISBN 978-972-8865-63-4, pages 355-362. DOI: 10.5220/0002100103550362
in Bibtex Style
@conference{secrypt06,
author={Timothy E. Levin and Cynthia E. Irvine and Thuy D. Nguyen},
title={LEAST PRIVILEGE IN SEPARATION KERNELS},
booktitle={Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2006)},
year={2006},
pages={355-362},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0002100103550362},
isbn={978-972-8865-63-4},
}
in EndNote Style
TY - CONF
JO - Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2006)
TI - LEAST PRIVILEGE IN SEPARATION KERNELS
SN - 978-972-8865-63-4
AU - E. Levin T.
AU - E. Irvine C.
AU - D. Nguyen T.
PY - 2006
SP - 355
EP - 362
DO - 10.5220/0002100103550362