Model Checking Distributed Mandatory Access Control Policies

2015 ◽  
Vol 18 (2) ◽  
pp. 1-25 ◽  
Author(s):  
Perry Alexander ◽  
Lee Pike ◽  
Peter Loscocco ◽  
George Coker
Keyword(s):  
Model Checking ◽  
Access Control ◽  
Control Policies ◽  
Mandatory Access Control ◽  
Access Control Policies

scholarly journals Extending Mandatory Access Control Policies in Android

2015 ◽  
pp. 21-35 ◽  
Author(s):  
Stefano Paraboschi ◽  
Enrico Bacis ◽  
Simone Mutti
Keyword(s):  
Access Control ◽  
Control Policies ◽  
Mandatory Access Control ◽  
Access Control Policies

scholarly journals Mandatory Access Control Policies Based on Vague Requirements

2014 ◽  
Vol 5 (1) ◽  
pp. 382-390
Author(s):  
Juraj Masar ◽  
Jiri Bartos ◽  
Cyril Klimes
Keyword(s):  
Access Control ◽  
Control Policies ◽  
Mandatory Access Control ◽  
Access Control Policies

scholarly journals Model-Checking Access Control Policies

2004 ◽  
pp. 219-230 ◽  
Author(s):  
Dimitar P. Guelev ◽  
Mark Ryan ◽  
Pierre Yves Schobbens
Keyword(s):  
Model Checking ◽  
Access Control ◽  
Control Policies ◽  
Access Control Policies

scholarly journals Evaluating Access Control Policies Through Model Checking

2005 ◽  
pp. 446-460 ◽  
Author(s):  
Nan Zhang ◽  
Mark Ryan ◽  
Dimitar P. Guelev
Keyword(s):  
Model Checking ◽  
Access Control ◽  
Control Policies ◽  
Access Control Policies

Dynamic Trusted Domain: Preventing Data Leakage of Trusted Subjects

2011 ◽  
Vol 48-49 ◽  
pp. 470-473
Author(s):  
Jun Ma ◽  
Zhi Ying Wang ◽  
Jiang Chun Ren ◽  
Jiang Jiang Wu ◽  
Yong Cheng ◽  
...  
Keyword(s):  
Access Control ◽  
Decision Maker ◽  
Major Complication ◽  
Security Policies ◽  
Sensitive Data ◽  
Control Policies ◽  
Mandatory Access Control ◽  
Access Control Policies ◽  
Security Levels

The existence of trusted subjects is a major complication in implementing multilevel secure (MLS) systems. In MLS, trusted subjects are granted with privileges to perform operations possibly violating mandatory access control policies. It is difficult to prevent them from data leakage with out too strict confinement. This paper reconsiders the privilege from the view of sensitive data and presents a dynamic trusted domain (DTD) mechanism for trusted subjects. In DTD, a domain is associated with a special label structure (LabelVector) distinguishing security policies and builds an isolated environment based on virtualization for a certain trusted subject. The channel for the trusted subject to communicate with outsider is controlled by a trusted request decision maker (TRDM). Only the request satisfies the rules on domain label and security levels can be passed through.

Sign in / Sign up

Export Citation Format

Share Document