87 search results - page 10 / 18 » Direct static enforcement of high-level security policies |
ESORICS
2006
Springer
13 years 11 months ago
2006
Springer
Abstract. While processor based systems often enforce memory protection to prevent the unintended sharing of data between processes, current systems built around reconfigurable har...
SEDE
2010
13 years 5 months ago
2010
Security certification assesses the security posture of a software system to verify its compliance with diverse, pre-specified security controls identified by guidelines from NIST...
ICSE
2007
IEEE-ACM
14 years 7 months ago
2007
IEEE-ACM
This paper presents an approach to statically retrofit legacy servers with mechanisms for authorization policy enforcement. The approach is based upon the observation that securit...
CCS
2005
ACM
14 years 1 months ago
2005
ACM
We present a technique for automatic placement of authorization hooks, and apply it to the Linux security modules (LSM) framework. LSM is a generic framework which allows diverse ...
ESORICS
2009
Springer
14 years 8 months ago
2009
Springer
By shifting the burden of proofs to the user, a proof-carrying authorization (PCA) system can automatically enforce complex access control policies. Unfortunately, managing those p...