Extensible Operating System Security
Abstract
The EXOS project investigated the practical application of security to extensible operating systems. The project leaders investigated how security policies should be represented and supported in extensible systems, concluding that classical policy models are intuitive, capture widely accepted policy requirements, and provide a concrete foundation for systems evaluation efforts. The investigators introduced support for several well known, important user-level security policy models. In addition, the investigators introduced kernel-oriented security by supporting the separation of kernel code into segments and enforcing a domain/type policy on threads as they execute or otherwise access system segments. Finally, they devised a domain/type policy extensibility strategy that is conservative, preserving prior policy after allowed extensions.
Document Details
- Document Type
- Technical Report
- Publication Date
- Sep 01, 2002
- Accession Number
- ADA408087
Entities
People
- Dennis Hollingworth
- Robert Rice
- Timothy Redmond