• Summary
• Related Documents
  • Active Bibliography
  • Co-citation
• Version History

Popular Tags

Add a tag:

No tags have been applied to this document.

BibTeX | Add To MetaCart

@TECHREPORT{Shapiro97verifyingoperating,
    author = {J. S. Shapiro and S. Weber},
    title = {Verifying Operating System Security},
    institution = {},
    year = {1997}
}

Years of Citing Articles

Bookmarks

         

OpenURL

 

Abstract:

A confined program is one which is unable to leak information to an unauthorized party or modify unauthorized resources. Confinement is an essential feature of any secure component-based system. This paper presents a proof of correctness of the EROS operating system architecture with respect to confinement. We give a formal statement of the requirements, construct a model of the architecture's security policy and operational semantics, and show that the architecture enforces the confinement requirements if a small number of initial static checks on the confined subsystem are satisfied. The mechanism does not rely on the run-time values of user state or analysis of the programs' algorithm(s). Our verification methodology borrows heavily from techniques developed in the programming languages community. We view the operating system as a programming language whose operations are the kernel calls. This has the advantage that the security requirements of concern can be stated in forms analog...

Citations