Discretionary Capability Confinement

Motivated by the need of application-level access control in dynamically extensible systems, this work proposes a static annotation system for modeling capabilies in a Java-like programming language. Unlike previous language-based capability systems, the proposed annotation system can provably enforce capability confinement. This confinement guarantee is leveraged to model a strong form of separation of duty known as hereditary mutual suspicion. The annotation system has been fully implemented in a standard Java Virtual Machine.

• Type: Conference
• Year: 2006
• Where: ESORICS
• Authors: Philip W. L. Fong
• Keywords: Annotation, Application-level Access Control, ESORICS 2006, Security Privacy, Static Annotation