Access Control in Runtime System

1
Access Control in Runtime System

• Xinwen Zhang
• Lab for Information Security Technology(LIST)
• George Mason University

2
Research Plan Phase 1

• Description of the access control requirements in
  runtime environment
• Define a policy language, or apply and extend
  others
• Flexible policy language by S.Jajodia et al
• Basic logical language

3
Research Plan Phase 2

• Expression of access control models in runtime
  environment
• Apply the result of Phase 1.
• Express traditional user identity based access
  control models
• MAC/DAC/RBAC
• Express latest user attributes and constraints
  based models
• UCON/DRM

4
Research Plan Phase 3

• Security administration model in runtime
  environment
• Flexible security administration is one of our
  main motivations
• Specifically, its the problem of interactions
  between runtime and underlying OS
• CLR vs. Windows / JVM vs. any OS
• Extend OS security administration to runtime
• Flexible configuration to meet security
  requirements in all kinds of applications