Security for Extensible Systems

13 years 8 months ago

Download www.cs.washington.edu

The recent trend towards dynamically extensible systems, such as Java, SPIN or VINO, promises more powerful and ﬂexible systems. At the same time, the impact of extensibility on overall system security and, speciﬁcally, on access control is still ill understood, and protection mechanisms in these extensible systems are rudimentary at best. In this position paper, we identify the structure of extensible systems as it relates to system security and postulate an initial model for access control. This model extends the discretionary access control of traditional operating systems to encompass extensions and, by using ideas explored by the security community, introduces a notion of mandatory access control. While a new access control model does not address all aspects of system security, we believe that it can serve as a solid foundation for developing a fully featured and ﬂexible security model for extensible systems. 1 Problem and Motivation The recent trend towards dynamically ext...

Robert Grimm, Brian N. Bershad

Real-time Traffic