The TrustedBSD MAC Framework

Author

Watson, Robert ; Feldman, Brian ; Migus, Adam ; Vance, Chris

Author_Institution

Network Associates Labs., Rockville, MD, USA

Volume

2

fYear

2003

fDate

22-24 April 2003

Firstpage

13

Abstract

Developing access control extensions for operating systems is an expensive and time-consuming task. Mechanisms for access control extension lag behind industry standard extension solutions for file systems, process schedulers, and device drivers, and suffer from a number of serious flaws in modern operating system kernels. The TrustedBSD MAC Framework provides a flexible and modular environment for access control extensions on the open source FreeBSD operating system, reducing the cost of implementation by abstracting out common elements found in many extensions. A variety of security policies have been implemented using the MAC Framework.

Keywords

authorisation; network operating systems; operating system kernels; public domain software; TrustedBSD MAC Framework; TrustedBSD Mandatory Access Control Framework; access control extension; access control extensions; flexible modular environment; industry standard extension solutions; open source FreeBSD operating system; operating system kernels; operating systems; security policies; Access control; Costs; Electrical equipment industry; File systems; Industrial control; Job shop scheduling; Kernel; Laboratories; Operating systems; Security;

fLanguage

English

Publisher

ieee

Conference_Titel

DARPA Information Survivability Conference and Exposition, 2003. Proceedings

Print_ISBN

0-7695-1897-4

Type

conf

DOI

10.1109/DISCEX.2003.1194900

Filename

1194900