Paradigm regained: Abstraction mechanisms for access control

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2896, Issue , 2003, Pages 224-242

  Miller, Mark S ^a   Shapiro, Jonathan S ^a  

^a JOHNS HOPKINS UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ABSTRACTING;

ABSTRACTION MECHANISM; ACCESS RIGHTS; CAPABILITY MODEL; CONTROL ACCESS;

ACCESS CONTROL;

EID: 0346955862     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-40965-6_15     Document Type: Article

References (52)

1. H. Abelson, G. Sussman. Structure and Interpretation of Computer Programs. MIT Press, 1986.
2. D.E. Bell, L. LaPadula. "Secure Computer Systems" ESD-TR-83-278, Mitre Corporation, vI and II (Nov 1973), vIII (Apr 1974).
3. M. Bishop, L. Snyder. "The Transfer of Information and Authority in a Protection System" SOSP 1979, p. 45-54.
4. W. E. Boebert. "On the Inability of an Unmodified Capability Machine to Enforce the *-Property" Proceedings of 7th DoD/NBS Computer Security Conference, September 1984, p. 291-293. http://zesty.ca/capmyths/boebert.html
5. (Comments on [Miller03]) http://www.eros-os.org/pipermail/cap-talk/2003-March/ 001133.html
6. R. Cartwright, M. Fagan, "Soft Typing", Proceedings of the SIGPLAN '91 Conference on Programming Language Design and Implementation.
7. A. Chander, D. Dean, J. C. Mitchell. "A State-Transition Model of Trust Management and Access Control" Proceedings of the 14th Computer Security Foundations Workshop, June 2001, p. 27-43.
8. Douglas Crockford, personal communications, 1997.
9. J.B. Dennis, E.C. Van Horn. "Programming Semantics for Multiprogrammed Computations" ommunications of the ACM, 9(3):143-155, March 1966.
10. J. E. Donnelley. "A Distributed Capability Computing System" Third International Conference on Computer Communication, Toronto, Canada, 1976.
11. L. van Doorn, M. Abadi, M. Burrows, E. P. Wobber. "Secure Network Objects" Proceedings of the 1996 IEEE Symposium on Security and Privacy, p. 211-221.
12. R. S. Fabry. "Capability-based addressing" Communications of the ACM, 17(7), 1974, p. 403-412.
13. A. Goldberg, A. Kay. Smalltalk-72 instruction manual. Technical Report SSL 76-6, Learning Research Group, Xerox Palo, Alto Research Center, 1976. http://www.spies.com/∼aek/pdf/xerox/alto/Smalltalk72_ Manual.pdf
14. L. Gong. "A Secure Identity-Based Capability System" Proceedings of the 1989 IEEE Symposium on Security and Privacy, p. 56-65.
15. N. Hardy. "The KeyKOS Architecture" ACM Operating Systems Review, September 1985, p. 8-25. http://www.agorics.com/Library/KeyKos/architecture.html
16. N. Hardy. U.S. Patent 4,584,639: Computer Security System,
17. M.A. Harrison, M.L. Ruzzo, and J.D. Ullman. "Protection in operating systems" Communications of the ACM, 19(8) p. 461-471, 1976.
18. C. Hewitt, P. Bishop, R. Stieger. "A Universal Modular Actor Formalism for Artificial Intelligence" Proceedings of the 1973 International Joint Conference on Artificial Intelligence, p. 235-246.
19. A. K. Jones, R. J. Lipton, L. Snyder. "A Linear Time Algorithm for Deciding Security" FOCS, 1976, p. 33-41.
20. K. Kahn, M. S. Miller. "Language Design and Open Systems", Ecology of Computation, Bernardo Huberman (ed.), Elsevier Science Publishers, North-Holland, 1988.
21. R. Y. Kain, C. E. Landwehr. "On Access Checking in Capability-Based Systems" IEEE Symposium on Security and Privacy, 1987.
22. P. A. Karger, A. J. Herbert. "An Augmented Capability Architecture to Support Lattice Security and Traceability of Access" Proc. of the 1984 IEEE Symposium on Security and Privacy, p. 2-12.
23. R. Kelsey, (ed.), W. Clinger, (ed.), J. Rees, (ed.), "Revised̂5 Report on the Algorithmic Language Scheme" ACM Sigplan Notices, 1998.
24. B. W. Lampson, "A Note on the Confinement Problem" CACM on Operating Systems, 16(10), October, 1973.
25. M. S. Miller, D. G. Bobrow, E. D. Tribble, J. Levy, "Logical Secrets" Concurrent Prolog: Collected Papers, E. Shapiro (ed.), MIT Press, Cambridge, MA, 1987.
26. M. S. Miller, D. Krieger, N. Hardy, C. Hibbert, E. D. Tribble. "An Automatic Auction in ATM Network Bandwidth". Market-based Control, A Paradigm for Distributed Resource Allocation, S. H. Clearwater (ed.), World Scientific, Palo Alto, CA, 1996.
27. M. S. Miller, C. Morningstar, B. Frantz. "Capability-based Financial Instruments" Proceedings Financial Cryptography 2000, Springer Verlag. http://www.erights.org/elib/capability/ode/index.html
28. M. S. Miller, K. -P. Yee, J. S. Shapiro, "Capability Myths Demolished", HP Labs Technical Report, in preparation. http://zesty.ca/capmyths/usenix.pdf
29. J. H. Morris. "Protection in Programming Languages" CACM 16(1) p. 15-21, 1973. http://www.erights.org/history/morris73.pdf.
30. R. Motwani, R. Panigrahy, V. Saraswat, S. Venkatasubramanian. "On the Decidability of Accessibility Problems" AT&T Labs - Research. http://www.research.att.com/∼suresh/Papers/java.pdf
31. P. G. Neumann, R. S. Boyer, R. J. Feiertag, K. N. Levitt, L. Robinson. A Provably Secure Operating System: The System, Its Applications, and Proofs, CSL-116, Computer Science Laboratory, SRI International, Inc., May 1980.
32. D. Parnas. "On the Criteria To Be Used in Decomposing Systems into Modules" CACM 15(12), December 1972. http://www.acm.org/classics/may96/.
33. S. A. Rajunas. "The KeyKOS/KeySAFE System Design" Key Logic, Inc., SEC009-01, March, 1989.
34. D. D. Redell. Naming and Protection in Extendible Operating Systems. Project MAC TR-140, MIT, November 1974. (Ph. D. thesis.)
35. J. Rees, A Security Kernel Based on the Lambda-Calculus. MIT AI Memo No. 1564. MIT, Cambridge, MA, 1996. http://mumble.net/jar/pubs/secureos/
36. M. Safra, E. Y. Shapiro. Meta Interpreters for Real. Information Processing86, H. -J. Kugler (ed.), North-Holland, Amsterdam, p. 271-278, 1986.
37. J. H. Saltzer, M. D. Schroeder. "The Protection of Information in Computer Systems" Proceedings of the IEEE 63(9), September 1975, p. 1278-1308.
38. R. D. Sansom, D. P. Julian, R. Rashid. "Extending a Capability Based System Into a Network Environment" Research sponsored by DOD, 1986, p. 265-274.
39. V. Saraswat, R. Jagadeesan. "Static support for capability-based programming in Java" http://www.cse.psu.edu/∼saraswat/neighborhood.pdf
40. J. S. Shapiro, J. M. Smith, D. J. Farber. "EROS: A Fast Capability System" Proceedings of the 17th ACM Symposium on Operating Systems Principles, December 1999, p. 170-185.
41. J. S. Shapiro, S. Weber. "Verifying the EROS Confinement Mechanism" Proceedings of the 2000 IEEE Symposium on Security and Privacy, p. 166-176.
42. K. Sitaker. Thoughts on Capability Security on the Web. http://lists.canonical.org/pipermail/kragen - tol/2000-August/000619.html
43. M. Stiegler, M. Miller. "A Capability Based Client: The DarpaBrowser" http://www.combex.com/papers/darpa-report/index.html
44. A. S. Tanenbaum, S. J. Mullender, R. van Renesse. "Using Sparse Capabilities in a Distributed Operating System" Proceedings of 6th International Conference on Distributed Computing Systems, 1986, p. 558-563.
45. E. D. Tribble, M. S. Miller, N. Hardy, D. Krieger, "Joule: Distributed Application Foundations", 1995. http://www.agorics.com/joule.html
46. P. Van Roy, S. Haridi, "Concepts, Techniques, and Models of Computer Programming" MIT Press, in preparation. http://www.info.ucl.ac.be/people/PVR/book.html
47. D. Wagner, D. Tribble. A Security Analysis of the Combex DarpaBrowser Architecture. http://www.combex.com/papers/darpa-review/index.html
48. D. S. Wallach, D. Balfanz, D. Dean, E. W. Felten. "Extensible Security Architectures for Java" Proceedings of the 16th Symposium on Operating Systems Principles, 1997, p. 116-128. http://www.cs.princeton.edu/sip/pub/sosp97.html
49. M. V. Wilkes, R. M. Needham. The Cambridge CAP Computer and its Operating System. Elsevier North Holland, 1979.
50. William A. Wulf, Ellis S. Cohen, William M. Corwin, Anita K. Jones, Roy Levin, C. Pierson, and Fred J. Pollack. "HYDRA: The Kernel of a Multiprocessor Operating System" Communications of the ACM, 17(6):337-345, 1974
51. W. A. Wulf, R. Levin, S. P. Harbison. HYDRA/C.mmp: An Experimental Computer System, McGraw Hill, 1981.
52. K.-P. Yee, M. S. Miller. Auditors: An Extensible, Dynamic Code Verification Mechanism. http://www.erights.org/elang/kernel/auditors/index.html