USS
2004
14 years 25 days ago
2004
Privilege separation partitions a single program into two parts: a privileged program called the monitor and an unprivileged program called the slave. All trust and privileges are...
ICISS
2007
Springer
14 years 5 months ago
2007
Springer
Applications are subject to threat from a number of attack vectors, and limiting their attack surface is vital. By using privilege separation to constrain application access to pro...
WWW
2010
ACM
14 years 6 months ago
2010
ACM
We present a programming model for building web applications with security properties that can be confidently verified during a security review. In our model, applications are d...