Add to ORKGAbstract: We extend the separation kernel abstraction to represent the enforcement of the principle of least privilege. In addition to the inter-block flow control policy prescribed by the traditional separation kernel paradigm, we describe an orthogonal, finer-grained flow control policy by extending the protection of elements to subjects and resources, as well as blocks, within a partitioned system. We show how least privilege applied to the actions of subjects provides enhanced protection for secure systems.
A separation kernel simulates a distributed environment us-ing a single physical machine by executin...
Due to the lack of both precise definitions and effective software engineering methodologies, securi...
Consumer devices are increasingly being used to perform security and privacy critical tasks. The sof...
Abstract: We extend the separation kernel abstraction to represent the enforcement of the principle...
Separation kernels mediate interaction between partitions in a secure system. System security polic...
Various system architectures have been proposed for high assurance enforcement of multilevel securit...
Approved for public release; distribution is unlimited. Prepared for: the National Security Agenc
Various system architectures have been proposed for high assurance enforcement of multilevel securit...
Security principles, like least privilege, are among the resources in the body of knowledge for secu...
Though system security would benefit if programmers routinely followed the principle of least privil...
Although many algorithms, hardware designs, and security protocols have been formally verified, form...
In operating systems, privilege is used to control the most important resources and functions, so ad...
Least privilege mechanism can provide a reasonable degree of security assurance for secure operating...
Many operating system services require special privileges to execute their tasks. A programming erro...
Security principles are often neglected by software architects, due to the lack of precise definitio...
A separation kernel simulates a distributed environment us-ing a single physical machine by executin...
Due to the lack of both precise definitions and effective software engineering methodologies, securi...
Consumer devices are increasingly being used to perform security and privacy critical tasks. The sof...
Abstract: We extend the separation kernel abstraction to represent the enforcement of the principle...
Separation kernels mediate interaction between partitions in a secure system. System security polic...
Various system architectures have been proposed for high assurance enforcement of multilevel securit...
Approved for public release; distribution is unlimited. Prepared for: the National Security Agenc
Various system architectures have been proposed for high assurance enforcement of multilevel securit...
Security principles, like least privilege, are among the resources in the body of knowledge for secu...
Though system security would benefit if programmers routinely followed the principle of least privil...
Although many algorithms, hardware designs, and security protocols have been formally verified, form...
In operating systems, privilege is used to control the most important resources and functions, so ad...
Least privilege mechanism can provide a reasonable degree of security assurance for secure operating...
Many operating system services require special privileges to execute their tasks. A programming erro...
Security principles are often neglected by software architects, due to the lack of precise definitio...
A separation kernel simulates a distributed environment us-ing a single physical machine by executin...
Due to the lack of both precise definitions and effective software engineering methodologies, securi...
Consumer devices are increasingly being used to perform security and privacy critical tasks. The sof...