Least Privilege in Separation Kernels

Thumbnail Image
Authors
Levin, Timothy E.
Irvine, Cynthia E.
Nguyen, Thuy, D.
Subjects
Assurance
Computer Security
Least Privilege
Separation Kernel
Advisors
Date of Issue
2006-08-00
Date
Publisher
International Conference on Security and Cryptography, Setubal, Portugal,
Language
Abstract
We extend the separation kernel abstraction to represent the enforcement of subjects provides enhanced protection for secure systems We extend the separation kernel abstraction to represent the enforcement of the principle of least privilege. In addition to the inter-block flow control policy prescribed by the traditional separation kernel paradigm, we describe an orthogonal, finer-grained flow control policy by extending the protection of elements to subjects and resources, as well as blocks, within a partitioned system. We show how least privilege applied to the actions.
Type
Article
Description
URI
https://hdl.handle.net/10945/7143
Series/Report No
Department
Computer Science (CS)
Organization
Identifiers
NPS Report Number
Sponsors
Funder
Format
Citation
Proceedings International Conference on Security and Cryptography, Setubal, Portugal, August 2006, pp. 355-362.
Distribution Statement
Approved for public release; distribution is unlimited.
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.
Collections
Publications
Load more