Cooperation Scheme of Operating Systems that Merges Upper Layer Functions for Endhanced Security Infrastructure

点击翻译按钮获取中文摘要

Information systems are growing up to be a social infrastructure today, so its dependability is a very important element for our sound lives. For this reason, much research is widely done for the secure infrastructure including new technologies in intrusion detection systems, encryption algorithms, authentication schemes, information forensics and so on ; however, it is tacitly assuming that the basic layer on which these technologies work can be trusted. This basic layer is what we call operating systems and these technologies can be useless if the operating systems are vulnerable. In addition, information systems are frequently constructed as distributed systems, but security mechanisms for these systems still are designed to work as a single-host system manner and lacks a view as a multiple-host system. So, we clarified some requirements for functions in terms of operating systems as a social infrastructure that work cooperatively as a multiple-host system, and proposed a policy-based scheme for distributed access control in multiple-host systems. Our proposal has two components : one is the policy-description system that can assign sufficient authorities for each principal of least privilege, the other is the mechanism that can control any access to enforce policy-based information flow.