NDLI: Flexible control of downloaded executable content

Please wait, while we are loading the content...

Flexible control of downloaded executable content

Content Provider	ACM Digital Library
Author	Prakash, Atul Islam, Nayeem Liedtke, Jochen Jaeger, Trent
Copyright Year	1999
Abstract	We present a security architecture that enables system and application a ccess control requirements to be enforced on applications composed from downloaded executable content. Downloaded executable content consists of messages downloaded from remote hosts that contain executables that run, upon receipt, on the downloading principal's machine. Unless restricted, this content can perform malicious actions, including accessing its downloading principal's private data and sending messages on this principal's behalf. Current security architectures for controlling downloaded executable content (e.g., JDK 1.2) enable specification of access control requirements for content based on its provider and identity. Since these access control requirements must cover every legal use of the class, they may include rights that are not necessary for a particular application of content. Therefore, using these systems, an application composed from downloaded executable content cannot enforce its access control requirements without the addition of application-specific security mechanisms. In this paper, we define an access control model with the following properties: (1) system administrators can define system access control requirements on applications and (2) application developers can use the same model to enforce application access control requirements without the need for ad hoc security mechanisms. This access control model uses features of role-based access control models to enable (1) specification of a single role that applies to multiple application instances; (2) selection of a content's access rights based on the content's application and role in the application; (3) consistency maintained between application state and content access rights; and (4) control of role administration. We detail a system architecture that uses this access control model to implement secure collaborative applications. Lastly, we describe an implementation of this architecture, called the Lava security architecture.
Starting Page	177
Ending Page	228
Page Count	52
File Format	PDF
ISSN	10949224
e-ISSN	15577406
DOI	10.1145/317087.317091
Volume Number	2
Issue Number	2
Journal	ACM Transactions on Information and System Security (TISSEC)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1999-05-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Access control models Authentication Autorization machanisms Collaborative systems Role-based access control
Content Type	Text
Resource Type	Article
Subject	Computer Science Safety, Risk, Reliability and Quality

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Practical safety in flexible access control models

Content-triggered trust negotiation

Role-based authorization constraints specification

Policy management using access control spaces

Flexible access control policy specification with constraint logic programming

Flexible Control of Downloaded Executable Content (1997)

Balancing cooperation and risk in intrusion detection

Privacy-aware role-based access control

TRBAC: A temporal role-based access control model

Flexible control of downloaded executable content

Similar Documents

Practical safety in flexible access control models

Content-triggered trust negotiation

Role-based authorization constraints specification

Policy management using access control spaces

Flexible access control policy specification with constraint logic programming

Flexible Control of Downloaded Executable Content (1997)

Balancing cooperation and risk in intrusion detection

Privacy-aware role-based access control

TRBAC: A temporal role-based access control model

Flexible control of downloaded executable content