Presentation | 1993/8/30 A Method of Discretionary Access Control Preventing Indirect Information Leakage Hyung Suck Kang, Tsutomu Matsumoto, Hideki Imai, |
---|---|
PDF Download Page | PDF download Page Link |
Abstract(in Japanese) | (See Japanese page) |
Abstract(in English) | The discretionary access control(DAC)policies commonly used in ordinary inputer systems are implemented fairly simple and straightforward,therefore they have several drawbacks.To achieve a relatively high efficiency,implementations based on DAC policies often adopt the group access permission for each subject such as user,group,etc.But this causes indirect information leakage.This paper proposes a method of DAC attaining both high confidentiality and efficiency.To manage information flows the method uses the dynami′c restriction on group access permission.It prevents unauth orized indirect information leakage with the control based on forcedly changed user access permission.All the operations of each module in this mechanism are processed at the security kernel. |
Keyword(in Japanese) | (See Japanese page) |
Keyword(in English) | DAC / Indirect information leakage / Information security / dynamic restriction / security Kernel / access control |
Paper # | ISEC93-27 |
Date of Issue |
Conference Information | |
Committee | ISEC |
---|---|
Conference Date | 1993/8/30(1days) |
Place (in Japanese) | (See Japanese page) |
Place (in English) | |
Topics (in Japanese) | (See Japanese page) |
Topics (in English) | |
Chair | |
Vice Chair | |
Secretary | |
Assistant |
Paper Information | |
Registration To | Information Security (ISEC) |
---|---|
Language | JPN |
Title (in Japanese) | (See Japanese page) |
Sub Title (in Japanese) | (See Japanese page) |
Title (in English) | A Method of Discretionary Access Control Preventing Indirect Information Leakage |
Sub Title (in English) | |
Keyword(1) | DAC |
Keyword(2) | Indirect information leakage |
Keyword(3) | Information security |
Keyword(4) | dynamic restriction |
Keyword(5) | security Kernel |
Keyword(6) | access control |
1st Author's Name | Hyung Suck Kang |
1st Author's Affiliation | Division of Electrical and computer Engineering,YOKOHAMA National University() |
2nd Author's Name | Tsutomu Matsumoto |
2nd Author's Affiliation | Division of Electrical and computer Engineering,YOKOHAMA National University |
3rd Author's Name | Hideki Imai |
3rd Author's Affiliation | Institute of Industrial Science,University of Tokyo |
Date | 1993/8/30 |
Paper # | ISEC93-27 |
Volume (vol) | vol.93 |
Number (no) | 208 |
Page | pp.pp.- |
#Pages | 7 |
Date of Issue |