Accountable Administration and Implementation in Operating Systems

Many security models and systems are built upon the assumption that super users are trustworthy. However, it becomes challenging to hold super users accountable since they can erase any trace of their activities. This paper proposes an accountable administration model for operating systems where all system administrators can be accounted for even if they are untrustworthy. The model is implemented in Linux, a real world operating system.