NDLI: Applying the composition principle to verify a hierarchy of security servers

Content Provider	IEEE Xplore Digital Library
Author	Heckman, M.R. Levitt, K.N.
Copyright Year	1998
Description	Author affiliation: Dept. of Comput. Eng., California Univ., Davis, CA, USA (Heckman, M.R.)
Abstract	This paper describes how the composition principle of Abadi and Lamport (1991) can be applied to specify and compose systems where access control policies are distributed among a hierarchy of agents. Examples of such systems are layered secure operating systems, where the mandatory access control policy is enforced by the lowest system layer and discretionary and application-specific policies are implemented by outer layers, and microkernel operating systems, where the access control policy may be distributed among a hierarchy of server processes. We specifically consider the case of a microkernel operating system type architecture, in which resource management policies are enforced by server processes outside of the kernel, and where the system access control policy is a composition of the distinct policies implemented by the servers. As an example, we have specified a two-server system, including both safety and progress properties. We formally verified the composition of the two server processes using the HOL theorem proving system.
Starting Page	338
Ending Page	347
File Size	247899
Page Count	10
File Format	PDF
ISBN	0818682558
DOI	10.1109/HICSS.1998.656298
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	1998-01-09
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Access control Safety Memory management Resource management Operating systems Kernel National security Computer science Control systems Computer security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Applying the Composition Principle to Verify a Hierarchy of Security Servers (1998)

Cryptkeeper: Improving security with encrypted RAM

Security issues of the Trusted Mach system

The Role Hierarchy Mining Problem: Discovery of Optimal Role Hierarchies

Policy vs. mechanism in the Secure TUNIS operating system

A System for Distributed SELinux Policy Management

Performance analysis of a user-level memory server

Applying the semantic Web layers to access control

Hierarchy-based access control in distributed environments

Applying the composition principle to verify a hierarchy of security servers

Similar Documents

Applying the Composition Principle to Verify a Hierarchy of Security Servers (1998)

Cryptkeeper: Improving security with encrypted RAM

Security issues of the Trusted Mach system

The Role Hierarchy Mining Problem: Discovery of Optimal Role Hierarchies

Policy vs. mechanism in the Secure TUNIS operating system

A System for Distributed SELinux Policy Management

Performance analysis of a user-level memory server

Applying the semantic Web layers to access control

Hierarchy-based access control in distributed environments

Applying the composition principle to verify a hierarchy of security servers