NDLI: Quantitatively Measure Access Control Mechanisms across Different Operating Systems

Content Provider	IEEE Xplore Digital Library
Author	Liang Cheng Yang Zhang Zhihui Han
Copyright Year	2013
Description	Author affiliation: Inst. of Software, Beijing, China (Liang Cheng; Yang Zhang; Zhihui Han)
Abstract	Access control mechanisms (ACM) play a critical role in protecting operating systems from malicious attacks. A variety of ACMs have been proposed till date, including discretionary access control (DAC) and mandatory access control (MAC). However, it is often challenging to evaluate and compare the quality of protection (QoP) of ACMs, especially when they are deployed on different platforms. In this paper, we propose an approach to quantitatively measure and compare the quality of ACMs. We introduce the notion of vulnerability profiles to capture the weakness of ACMs in protecting against attacks, and the notion of vulnerability coefficients as a numeric and platform-independent measurement of the protection quality of ACMs. Based on these two notions, our approach applies the Grey System Theory and an independent vulnerability scoring system to infer complete vulnerability profiles and to calculate fair and objective vulnerability coefficients for ACMs. To our knowledge, our approach is the first attempt for quantitative measurement and comparison of ACMs across different operating systems. Based on our approach, we implement a prototype tool called ACVAL that leverages logic programming to characterize, evaluate, and compare access control mechanisms. We apply ACVAL to three mainstream ACMs, and results that ACVAL is effective in evaluating access control mechanisms across different operating systems, a feature particularly useful to administrators of heterogenous IT systems.
Sponsorship	IEEE
Starting Page	50
Ending Page	59
File Size	331768
Page Count	10
File Format	PDF
ISBN	9781479904068
DOI	10.1109/SERE.2013.12
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-06-18
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Access control Logic programming Security Measurement Vulnerability Profile Operating systems Process control Prototypes Logic Programming Operating System Information systems
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Operating System Security and Host Vulnerability Evaluation

Vulnerability profile for Linux

A Graph-Based Approach for Managing Enterprise Information System Security

Applying Categorical Logic on a Holistic Security Architecture across Distributed Systems

Increasing information security with mandatory access controls in the operating system (2006).

The security policy of the secure distributed operating system prototype

A Malicious Code Immune Model Based on Program Encryption

IIS Security Mechanisms

Analysis and Study of Security Mechanisms inside Linux Kernel

Quantitatively Measure Access Control Mechanisms across Different Operating Systems

Similar Documents

Operating System Security and Host Vulnerability Evaluation

Vulnerability profile for Linux

A Graph-Based Approach for Managing Enterprise Information System Security

Applying Categorical Logic on a Holistic Security Architecture across Distributed Systems

Increasing information security with mandatory access controls in the operating system (2006).

The security policy of the secure distributed operating system prototype

A Malicious Code Immune Model Based on Program Encryption

IIS Security Mechanisms

Analysis and Study of Security Mechanisms inside Linux Kernel

Quantitatively Measure Access Control Mechanisms across Different Operating Systems