Securing Grid Data Using Mandatory Access Controls

The main contribution of this paper is to investigate issues in using Mandatory Access Controls (MACs), namely those provided by SELinux, to secure application-level data. Particular emphasis is placed on health-care records located on the grid. The paper disccuses the importance of a trusted computing base in providing application security. It describes a secure three-tiered architecture, incorporating trusted hardware, SELinux, and application security mechanisms that are appropriate for securing sensitive application data.

• Type: Conference
• Year: 2007
• Where: ACSW
• Authors: Matthew Henricksen, William J. Caelli, Peter R. Croll
• Keywords: ACSW 2007, Application Security, Mandatory Access Controls, Secure Three-tiered Architecture, Security Privacy