Lecture Notes in Computer Science, 2006, Volume 4318/2006, 211-224, DOI: 10.1007/11937807_17

Design and Implementation of Fast Access Control That Supports the Separation of Duty

SeongKi Kim, EunKyung Jin, YoungJin Song and SangYong Han

View Related Documents

Abstract

The importance of security-enhancing mechanisms at the kernel level, such as an access control, has been increasingly emphasized as the weaknesses and limitation of mechanisms at the user level have been revealed. Among many access controls available, role based access control (RBAC) is mandatory and supports the separation of duty when compared to discretionary access control (DAC). With these advantages, RBAC has been widely implemented at various levels of computing environments, such as the operating system and database management system levels. However, the overheads for supporting all of the RBAC features and flexibility are significant. We designed a fast, simple, and mandatory access control model with some RBAC and DAC characteristics, then implemented a prototype and measured its overheads.

Keywords  Access control - DAC - RBAC - Flask - SELinux

Fulltext Preview

Image of the first page of the fulltext document