Small TCBs of Policy-controlled Operating Systems

Produktinformationen "Small TCBs of Policy-controlled Operating Systems"

Policy-controlled operating systems provide a policy decision and enforcement environment to protect and enforce their security policies. The trusted computing base (TCB) of these systems are large and complex, and their functional perimeter can hardly be precisely identified. As a result, a TCB's correctness and tamper-proofness are hard to ensure in its implementation. This dissertation develops a TCB engineering method for policy-controlled operating systems that tailors the policy decision and enforcement environment to support only those policies that are actually present in a TCB. A TCB's functional perimeter is identified by exploiting causal dependencies between policies and TCB functions, which results in causal TCBs that contain exactly those functions that are necessary to establish, enforce, and protect their policies. The precise identification of a TCB's functional perimeter allows for implementing a TCB in a safe environment that indeed can be isolated from untrusted system components. Thereby, causal TCB engineering sets the course for implementations whose size and complexity pave the way for analyzing and verifying a TCB's correctness and tamper-proofness.

Weiterführende Links zu "Small TCBs of Policy-controlled Operating Systems"

Bücher in diesem Shop von Anja Pölck

Kundenbewertungen für "Small TCBs of Policy-controlled Operating Systems"

Bewertung schreiben

Ihr Name*:

 

Ihre E-Mail-Adresse*:

 

Zusammenfassung*:

 

Bewertung*: 10 sehr gut 9 8 7 6 5 4 3 2 1 sehr schlecht

 

Ihre Meinung (max. 1000 Zeichen inkl. Leerzeichen):

 

Bitte geben Sie die Zahlenfolge in das nachfolgende Textfeld ein

 

 

Die mit einem * markierten Felder sind Pflichtfelder.