It's My Privilege: Controlling Downgrading in DC-Labels
It's My Privilege: Controlling Downgrading in DC-Labels
复制标题
这是我的特权：控制 DC 标签的降级
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Alejandro Russo
中科院分区：
文献类型：
--
作者：
Lucas Waye;Pablo Buiras;D. King;Stephen Chong;Alejandro Russo
DC标签是一种表达性标签格式，用于对信息流控制系统中的数据敏感性进行分类。DC标签使用类似于能力的特权来降级信息。不适当地使用特权可能会危及安全性，但DC标签没有提供确保适当使用的机制。我们扩展了DC-标签的新概念的有界特权和强大的特权。有界特权指定并强制执行可能降级的数据标签的上限和下限。有限权限简单直观，但可以表达一组丰富的理想安全策略。鲁棒特权只能用于鲁棒的降级操作，即，不得滥用守则行使特权，以公布或核证超出预期的资料。令人惊讶的是，强大的降级可以在DC标签中表示为使用弱化特权的降级操作。我们提供完善的运行时安全检查，以确保降级操作的稳健性。我们说明了有限的和强大的特权在案例研究中的适用性，以及通过识别现有的DC标签为基础的应用程序中的漏洞。
Disjunction Category Labels DC-labels are an expressive label format used to classify the sensitivity of data in information-flow control systems. DC-labels use capability-like privileges to downgrade information. Inappropriate use of privileges can compromise security, but DC-labels provide no mechanism to ensure appropriate use. We extend DC-labels with the novel notions of bounded privileges and robust privileges. Bounded privileges specify and enforce upper and lower bounds on the labels of data that may be downgraded. Bounded privileges are simple and intuitive, yet can express a rich set of desirable security policies. Robust privileges can be used only in downgrading operations that are robust, i.e., the code exercising privileges cannot be abused to release or certify more information than intended. Surprisingly, robust downgrades can be expressed in DC-labels as downgrading operations using a weakened privilege. We provide sound and complete run-time security checks to ensure downgrading operations are robust. We illustrate the applicability of bounded and robust privileges in a case study as well as by identifying a vulnerability in an existing DC-label-based application.
DOI：
--
发表时间：
2014-10
期刊：
--
影响因子：
--
作者：
D. Stefan;Edward Z. Yang;Petr Marchenko;Alejandro Russo;David Herman;B. Karp;David Mazières
通讯作者：
D. Stefan;Edward Z. Yang;Petr Marchenko;Alejandro Russo;David Herman;B. Karp;David Mazières