USS
2004
13 years 5 months ago
2004
Privilege separation partitions a single program into two parts: a privileged program called the monitor and an unprivileged program called the slave. All trust and privileges are...
ICISS
2007
Springer
13 years 10 months ago
2007
Springer
Applications are subject to threat from a number of attack vectors, and limiting their attack surface is vital. By using privilege separation to constrain application access to pro...
WWW
2010
ACM
13 years 11 months ago
2010
ACM
We present a programming model for building web applications with security properties that can be confidently verified during a security review. In our model, applications are d...