| L. Badger, D. F. Sterne, D. L. Sherman, K. M. Walker, and S. A. Haghighat. Pratical Domain and Type Enforcement for UNIX. In Proceedings of the 1995 IEEE Symposium on Security and Privacy, pages 66-77, Oakland, California, May 1995. |
....policy manager, which interprets them to perform actual policy decisions. The specification language supports three major constructs. The first construct, namespace , maps named resources to security identifiers, similar to the name based security attributes in domain and type enforcement [Badger et al. 95a, Badger et al. 95b] The second construct, access matrix , specifies legal permissions for pairs of security identifiers [Lampson 71] It also specifies how to perform transfers between protection domains. The third construct, class , specifies where and how to insert calls to the enforcement ....
L. Badger, D. F. Sterne, D. L. Sherman, K. M. Walker, and S. A. Haghighat. Pratical Domain and Type Enforcement for UNIX. In Proceedings of the 1995 IEEE Symposium on Security and Privacy, pages 66-77, Oakland, California, May 1995.
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC