Type Based Discretionary Access Control

13 years 9 months ago

Download www.dsi.unive.it

Abstract. Discretionary Access Control (DAC) systems provide powerful mechanisms for resource management based on the selective distribution of capabilities to selected classes of principals. We study a type-based theory of DAC models for concurrent and distributed systems represented as terms of Cardelli, Ghelli and Gordon’s pi calculus with groups [2]. In our theory, groups play the rˆole of principals, and the structure of types allows ﬁne-grained mechanisms to be speciﬁed to govern the transmission of names, to bound the (iterated) re-transmission of capabilities, to predicate their use on the inability to pass them to third parties, ... and more. The type system relies on subtyping to help achieve a selective distribution of capabilities, based on the groups in control of the communication channels. Type preservation provides the basis for a safety theorem stating that in well-typed processes all names ﬂow according to the delivery policies speciﬁed by their types, and ...

Michele Bugliesi, Dario Colazzo, Silvia Crafa

Real-time Traffic