Pastures: Towards usable security policy engineering

Proceedings - Second International Conference on Availability, Reliability and Security, ARES 2007

Volumn , Issue , 2007, Pages 1052-1059

  Bratus, Sergey ^a   Ferguson, Alex ^a   McIlroy, Doug ^a   Smith, Sean ^a  

^a DARTMOUTH COLLEGE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER AIDED SOFTWARE ENGINEERING; COMPUTER OPERATING SYSTEMS; DATA STRUCTURES; RESOURCE ALLOCATION; USABILITY ENGINEERING;

COMPUTING INSTALLATION; SECURITY POLICY ENGINEERING; SELINUX MODELS;

NETWORK SECURITY;

EID: 34548165072     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2007.114     Document Type: Conference Paper

References (15)

1. LIDS: The linux intrusion detection system, http://www.lids.org/.
2. Linux vserver project, http://linux-vserver.org/paper.
3. L. Badger, D. F. Sterne, D. L. Sherman, and K. M. Walker. A domain and type enforcement UNIX prototype. Computing Systems, 9(1):47-83, 1996.
4. K.-H. Baek and S. W. Smith. Preventing Theft of Quality of Service on Open Platforms. In IEEE/CREATE-NET SecQoS 2005, September 2005.
5. W. Boebert. The lock demonstration. In Proceedings of the 11th National Computer Security Conference, 1988.
6. J. Dike. User-mode linux.
7. P.-H. Kamp and R. N. M. Watson. Jails: Confining the omnipotent root.
8. P.-H. Kamp and R. N. M. Watson. Building systems to be shared securely. ACM Queue, 2(5), July/August 2004.
9. D. Langille. Virtualization with freebsd jails, 2006.
10. Z. Liang, V. Venkatakrishnan, and R. Sekar. Isolated program execution: An application transparent approach for executing untrusted programs. In Proceedings of the Annual Computer Security Applications Conference (ACSAC), December 2003.
11. P. Loscocco and S. Smalley. Integrating flexible support for security policies into the linux operating system. In Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference (FREENIX '01). The USENIX Association, 2001.
12. D. Price and A. Tucker. Solaris zones: Operating system support for consolidating commercial workloads. In Proceedings of the 18th Large Installation Systems Administration Conference (USENIX LISA '04). The USENIX Association, 2004.
13. A. Tucker and D. Comay. Solaris zones: Operating system support for server consolidation. In USENIX 3rd Virtual Machine Research and Technology Symposium, 2004.
14. C. Wright, C. Cowan, S. Smalley, J. Morris, and G. KroahHartman. Linux security modules: General security support for the linux kernel. In Proceedings of the 11th USENIX Security Symposium, pages 17-31, Berkeley, CA, USA, 2002. USENIX Association.
15. M. Zee. Implementing a clonable network stack in the freebsd kernel. In Proceedings of the USENIX 2003 Annual Technical Conference, FREENIX Track, pages 137-150. The USENIX Association, 2003.