Title :
The TrustedBSD MAC Framework
Author :
Watson, Robert ; Feldman, Brian ; Migus, Adam ; Vance, Chris
Author_Institution :
Network Associates Labs., Rockville, MD, USA
Abstract :
Developing access control extensions for operating systems is an expensive and time-consuming task. Mechanisms for access control extension lag behind industry standard extension solutions for file systems, process schedulers, and device drivers, and suffer from a number of serious flaws in modern operating system kernels. The TrustedBSD MAC Framework provides a flexible and modular environment for access control extensions on the open source FreeBSD operating system, reducing the cost of implementation by abstracting out common elements found in many extensions. A variety of security policies have been implemented using the MAC Framework.
Keywords :
authorisation; network operating systems; operating system kernels; public domain software; TrustedBSD MAC Framework; TrustedBSD Mandatory Access Control Framework; access control extension; access control extensions; flexible modular environment; industry standard extension solutions; open source FreeBSD operating system; operating system kernels; operating systems; security policies; Access control; Costs; Electrical equipment industry; File systems; Industrial control; Job shop scheduling; Kernel; Laboratories; Operating systems; Security;
Conference_Titel :
DARPA Information Survivability Conference and Exposition, 2003. Proceedings
Print_ISBN :
0-7695-1897-4
DOI :
10.1109/DISCEX.2003.1194900
