Security testing a collaboration application based on an email-like paradigm

点击翻译按钮获取中文摘要

Collaboration tools have emerged as an important class of software applications in enterprise systems. They are used by multiple parties to work together on a project. A particular sub-class of collaboration tools are those used for joint creation and maintenance of documents. The industry partner of this proposal, Enterprise File System Inc., has developed a new document collaboration system. Its main novelty is that it is based on an email-like paradigm. Security is an important consideration in such the system. The intent of this project is to leverage the PI and his research group's expertise in security, and particularly in security testing. The new paradigm for collaboration mandates new kinds of authorization rules for collaboration. The PI has recently researched testing real-world authorization systems. In this project, we will investigate the applicability of existing approaches, and develop new approaches for security testing Enterprise File System's software. The project will train Highly Qualified Personnel (HQP) in the important topic of information security, and is of value to Canada.