Mandatory Access Control On Distributed Systems: A Metapolicy Framework - Archive ouverte HAL Access content directly
Conference Papers Year : 2005

Mandatory Access Control On Distributed Systems: A Metapolicy Framework

Abstract

This paper presents a novel approach to update a Mandatory Access Control policy on a distributed architecture, without relying on a central component. The two main features of this approach are: 1) updates are performed locally, on each node of the distributed architecture, and 2) all updates are locally checked against a common metapolicy, which specifies what part of the policy each node can update. Thus, there is no need for a central component, and still the policy update is controlled. This local approach provides better fault-tolerance and allows a given node to react to malicious activities detected locally. The metapolicy is shared by all nodes and relies on the notions of types, roles, users and security context. It contains modification rules that specify how the MAC policy can be modified in a given security context. This approach is developed as a joint research project with INRIA and FT R&D, called ACI SATIN, where verification techniques are proposed to verify that the distributed modifications cannot violate the required security properties.
No file

Dates and versions

hal-00083435 , version 1 (30-06-2006)

Identifiers

  • HAL Id : hal-00083435 , version 1

Cite

Mathieu Blanc, Pierre Courtieu, Gaétan Hains. Mandatory Access Control On Distributed Systems: A Metapolicy Framework. First Colloquium on Risk and Security of the Internet and Systems (CRiSIS 2005), Oct 2005, Bourges, France. pp.133-144. ⟨hal-00083435⟩
74 View
0 Download

Share

Gmail Facebook X LinkedIn More