A proof-carrying file system

A proof-carrying file system (2009)

Cached

Download Links

by Deepak Garg , Frank Pfenning

Citations:

BibTeX

@TECHREPORT{Garg09aproof-carrying,
    author = {Deepak Garg and Frank Pfenning},
    title = {A proof-carrying file system},
    institution = {},
    year = {2009}
}

Bookmark

OpenURL

Abstract

This paper presents the design and implementation of PCFS, a file system that uses formal proofs and capabilities to efficiently enforce access policies expressed in a rich logic. Salient features include backwards compatibility with existing programs and automatic enforcement of access rules that depend on both time and system state. We rigorously prove that enforcement using capabilities is correct, and evaluate the file system’s performance.

Citations

493	Untersuchungen über das logische Schließen - Gentzen - 1935
403	Authentication in distributed systems: Theory and practice - Lampson, Abadi, et al. - 1992
334	Uniform proofs as a foundation for logic programming - Miller, Nadathur, et al. - 1991
315	A calculus for access control in distributed systems - Abadi, Burrows, et al. - 1993
283	Logic Programming in a Fragment of Intuitionistic Linear Logic - Hodas, Miller - 1994
232	The KeyNote Trust Management System (Version 2), Internet RFC 2704 edition - Blaze, Feigenbaum, et al. - 1999
163	Authentication in the Taos operating system - Wobber, Abadi, et al. - 1994
161	Proof-carrying authentication - Appel, Felten - 1999
150	Local type inference - Pierce, Turner
143	Internet X.509 public key infrastructure certificate and - Housley, Ford, et al.
143	R.: A Judgmental Reconstruction of Modal Logic - Pfenning, Davies
101	Certificate chain discovery in SPKI/SDSI - Clarke, Elien, et al.
100	a logic-based security language - Binder - 2002
85	Datalog with constraints: A foundation for trust-management languages - Li, Mitchell
79	Cassandra: flexible trust management, applied to electronic health records - Becker, Sewell - 2004
55	Device-enabled authorization in the Grey system - Bauer, Garriss, et al. - 2005
52	Access control in a core calculus of dependency - Abadi
45	Non-interference in constructive authorization logic - Garg, Pfenning - 2006
41	A.: Design and semantics of a decentralized authorization language - Becker, Fournet, et al. - 2007
40	A judgmental analysis of linear logic - Chang, Chaudhuri, et al. - 2003
39	Binder: A logic-based security language - DeTreville - 2002
37	Access Control for the Web via Proof-Carrying Authorization - BAUER
37	Security for network attached storage devices - Gobioff, Gibson, et al. - 1997
29	Specifying and reasoning about dynamic access-control policies - Dougherty, Fisler, et al. - 2006
27	Aura: a programming language for authorization and audit - Jia, Vaughan, et al.
24	Authenticating network attached storage - Reed, Chron, et al. - 2000
22	An authorization logic with explicit time - DeYoung, Garg, et al. - 2007
19	The strongman architecture - Keromytis, Ioannidis, et al. - 2003
19	A modal deconstruction of access control logics - Garg, Abadi - 2008
17	Alpaca: Extensible Authorization for Distributed Services - LESNIEWSKI-LAAS, FORD, et al. - 2007
14	Block-level security for network-attached disks - AGUILERA, JI, et al. - 2003
13	and Itay Neeman. DKAL: Distributed-knowledge authorization language - Gurevich - 2008
12	Thekkath. Block-Level Security for Network-Attached Disks - Aguilera, Ji, et al. - 2003
12	Dkal: Distributed-knowledge authorization language - GUREVICH, I
11	Secure capabilities for a petabytescale object-based distributed file system - Olson, Miller
11	Distributed programming with distributed authorization - Avijit, Datta, et al. - 2010
10	Nexus Authorization Logic (NAL): Design Rationale and Applications - Schneider, Walsh, et al. - 2011
9	Capability file names: Separating authorisation from user management in an internet file system - Regan, Jensen - 2001
8	Proof Theory for Authorization Logic and its Application to a Practical File System - Garg - 2009
7	Proof search in an authorization logic - Garg - 2009
4	a logic-based trust-management system - Soutei - 2006
4	a Logic-Based Trust-Management System - Pimlott, Kiselyov, et al.
3	On secure distributed implementations of dynamic access control - Chaudhuri
3	A logic for reasoning about time-dependent access control policies - DeYoung - 2008
2	Filesystem in Userspace,” available from http://fuse.sourceforge.net - “FUSE
2	Abductive authorization credential gathering - Becker, Mackay, et al. - 2009
2	Device-enabled authorization - Bauer, Garriss, et al. - 2005
2	A logical representation of common rules for controlling access to classified information - Garg, Pfenning, et al. - 2009
1	Available from http://www.coker.com.au/bonnie - Bonnie
1	available from http://www.coker.com.au - “Bonnie