Security testing a collaboration application based on an email-like paradigm

协作工具已经成为企业系统中一类重要的软件应用程序。它们被多方用来共同完成一个项目。协作工具的一个特殊子类是用于联合创建和维护文档的工具。该提案的行业合作伙伴企业文件系统公司（Enterprise File System Inc.）开发了一个新的文档协作系统。它的主要新颖之处在于它基于类似电子邮件的范例。在这样的系统中，安全性是一个重要的考虑因素。这个项目的目的是利用PI和他的研究小组在安全性方面的专业知识，特别是在安全性测试方面。新的协作范例要求新的协作授权规则类型。PI最近研究了测试真实世界的授权系统。在这个项目中，我们将调查现有方法的适用性，并开发用于企业文件系统软件安全测试的新方法。该项目将培养信息安全这一重要课题的高素质人才（HQP），对加拿大具有重要价值。

Collaboration tools have emerged as an important class of software applications in enterprise systems. They are used by multiple parties to work together on a project. A particular sub-class of collaboration tools are those used for joint creation and maintenance of documents. The industry partner of this proposal, Enterprise File System Inc., has developed a new document collaboration system. Its main novelty is that it is based on an email-like paradigm. Security is an important consideration in such the system. The intent of this project is to leverage the PI and his research group's expertise in security, and particularly in security testing. The new paradigm for collaboration mandates new kinds of authorization rules for collaboration. The PI has recently researched testing real-world authorization systems. In this project, we will investigate the applicability of existing approaches, and develop new approaches for security testing Enterprise File System's software. The project will train Highly Qualified Personnel (HQP) in the important topic of information security, and is of value to Canada.