Make Least Privilege a Right (Not a Privilege)

No abstract is available for this paper.

• Publication year

  2005

• Venue

  USENIX Workshop on Hot Topics in Operating Systems

• Publication date

  2005-06-12

• Fields of study

  Computer Science

• Identifiers

  No identifiers available.

• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Polaris: virus-safe computing for Windows XP

  2006cited by this paper
• Side Effects Are Not Sufficient to Authenticate Software

  2004cited by this paper
• Towards a Verified , General-Purpose Operating System Kernel †

  2004cited by this paper
• Γ and B

  2004cited by this paper
• Improving Host Security with System Call Policies

  2003cited by this paper
• Preventing Privilege Escalation

  2003cited by this paper
• Anomaly intrusion detection in dynamic execution environments

  2002cited by this paper
• TrustedBSD: Adding Trusted Operating System Features to FreeBSD

  2001cited by this paper
• A Toolkit for User-Level File Systems

  2001cited by this paper
• Meeting Critical Security Objectives with Security-Enhanced Linux

  2001cited by this paper
• EROS: a fast capability system

  1999cited by this paper
• The Flask Security Architecture: System Support for Diverse Security Policies

  1999cited by this paper
• A decentralized model for information flow control

  1997cited by this paper
• A Secure Environment for Untrusted Helper Applications

  1996cited by this paper
• Toward real microkernels

  1996cited by this paper
• Plan 9 from Bell Labs

  1995cited by this paper
• Sendmail

  1994cited by this paper
• The use of name spaces in Plan 9

  1993cited by this paper
• Assuring Distributed Trusted Mach

  1993cited by this paper
• The KeyKOS Nanokernel Architecture

  1992cited by this paper
• A Retrospective on the VAX VMM Security Kernel

  1991cited by this paper
• Design and implementation of the Sun network filesystem

  1985cited by this paper
• Capability-Based Computer Systems

  1984cited by this paper
• The Cambridge CAP computer and its operating system (Operating and programming systems series)

  1979cited by this paper
• Proceedings of the General Track: 2004 Usenix Annual Technical Conference Rex: Secure, Extensible Remote Execution

  year unknowninfluential reference
• Proceedings of the 5th Symposium on Operating Systems Design and Implementation Scale and Performance in the Denali Isolation Kernel

  year unknowncited by this paper
• Proceedings of the General Track: 2004 Usenix Annual Technical Conference Building Secure High-performance Web Services with Okws

  year unknowncited by this paper

• Implementing the principle of least administrative privilege on operating systems: challenges and perspectives

  2024cites this paper
• Low-Cost Privilege Separation with Compile Time Compartmentalization for Embedded Systems

  2023cites this paper
• Implementing the Principle of Least Privilege Using Linux Capabilities: Challenges and Perspectives

  2023cites this paper
• Systematic Analysis of Security and Vulnerabilities in Miniapps

  2023cites this paper
• Lightweight, Multi-Stage, Compiler-Assisted Application Specialization

  2021cites this paper
• Watching the watchmen: Least privilege for managed network services

  2021cites this paper
• Automated policy synthesis for system call sandboxing

  2020cites this paper
• Making least privilege the low-hanging fruit in clouds

  2017cites this paper
• Cimplifier: automatically debloating containers

  2017cites this paper
• New Directions for Container Debloating

  2017cites this paper
• Native WebLab

  2017cites this paper
• Towards Least Privilege Containers with Cimplifier

  2016influential citation
• Software Contracts for Security

  2016cites this paper
• Towards practical information flow control and audit

  2016cites this paper
• Information Flow Control for Secure Cloud Computing

  2014cites this paper
• SHILL: A Secure Shell Scripting Language

  2014cites this paper
• Towards secure web browsing on mobile devices

  2014cites this paper
• IFDB: decentralized information flow control for databases

  2013cites this paper
• Authentication in Ethos

  2013cites this paper
• Practical and effcient runtime taint tracking

  2013cites this paper
• A Functional View of Imperative Information Flow Extended Version

  2012cites this paper
• Enforcing user-space privilege separation with declarative architectures

  2012cites this paper
• How to Find a Rigorous Set of Roles for Application of RBAC

  2012cites this paper
• An Evaluation of the Google Chrome Extension Security Architecture

  2012cites this paper
• Costs of Security in the PFS File System

  2012cites this paper
• A Functional View of Imperative Information Flow

  2012cites this paper
• Decentralized information flow control for databases

  2012cites this paper
• Towards Comprehensible and Effective Permission Systems

  2012cites this paper
• Authorization and trust in software systems

  2012cites this paper
• A conceptual model for preventing web bypass vulnerabilities

  2011cites this paper
• CloudVisor: retrofitting protection of virtual machines in multi-tenant cloud with nested virtualization

  2011cites this paper
• Making Linux Protection Mechanisms Egalitarian with UserFS

  2010cites this paper
• Virtual application appliances on clusters

  2010cites this paper
• Enforcing User Privacy in Web Applications using Erlang

  2010cites this paper
• Johnny can drag and drop: determining user intent through traditional interactions to improve desktop security

  2010cites this paper
• DTM : A New Mechanism for Extensible Operating Systems

  2009influential citation
• Hard-Object: Enforcing Object Interfaces Using Code- Range Data Protection

  2009cites this paper
• Nemesis: Preventing Authentication & Access Control Vulnerabilities in Web Applications

  2009cites this paper
• Multiple-Interface Operating Systems Designed for Thin-Client Platforms

  2009cites this paper
• Toward least-privilege isolation for software

  2009cites this paper
• A component-based policy-neutral architecture for kernel-level access control

  2009cites this paper
• xBook: Redesigning Privacy Control in Social Networking Platforms

  2009influential citation
• Wedge: Splitting Applications into Reduced-Privilege Compartments

  2008cites this paper
• Functionality-based Application Confinement - Parameterised Hierarchical Application Restrictions

  2008cites this paper
• Reusability of Functionality-Based Application Confinement Policy Abstractions

  2008cites this paper
• Information flow control for secure web sites

  2008influential citation
• Policy management and decentralized debugging in the asbestos operating system

  2008cites this paper
• Dynamic trust assessment of software services

  2007cites this paper
• Events Can Make Sense

  2007cites this paper
• Toward Secure Services from Untrusted Developers

  2007cites this paper
• Tamper-Resistant Execution in an Untrusted Operating System Using A Virtual Machine Monitor

  2007cites this paper
• Authority Analysis for Least Privilege Environments

  2007cites this paper
• Labels and event processes in the Asbestos operating system

  2007cites this paper
• Fcs-arspa'07 Joint Workshop on Foundations of Computer Security and Automated Reasoning for Security Protocol Analysis Contents Preface 5 from Securing Navigation Systems to Securing Wireless Communication through Location- Awareness Srdjan Capkun 7 Automated Security Analysis of Ad Hoc Routing Prot

  2007cites this paper
• Asbestos : operating system security for mobile devices

  2006cites this paper
• Making information flow explicit in HiStar

  2006cites this paper
• Retrofitting legacy code for authorization policy enforcement

  2006cites this paper
• Acetone : a system call interface for Asbestos labels

  2005cites this paper
• Building Fast and Secure Web Services with OKWS

  2005cites this paper
• The Hippocratic File System : Protecting Privacy in Networked Storage

  2005cites this paper
• Mandatory Security and Performance of Services in Asbestos

  2005cites this paper
• Asbestos: Securing Untrusted Software with Interposition

  2005cites this paper
• Labels and event processes in the asbestos operating system

  2005cites this paper
• Skyeye: An Instruction Simulator with Energy Awareness

  2004cites this paper
• Simplified Event Programming for Busy Network Applications

  year unknowncites this paper