Making information flow explicit in HiStar.
HiStar is a new operating system designed to minimize the amount of code that must be trusted. HiStar provides strict information flow control, which allows users to specify precise data security policies without unduly limiting the structure of applications. HiStar's security features make it possi...
| Published in: | Communications of the ACM Vol. 54; no. 11; pp. 93 - 102 |
|---|---|
| Main Authors: | , , , |
| Format: | Article |
| Published: |
Association for Computing Machinery
Nov2011
|
| Subjects: | |
| Online Access: | View this record in EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=70368666&site=ehost-live header: @attributes: shortDbName: hlh uiTerm: 70368666 longDbName: Humanities International Complete uiTag: AN controlInfo: bkinfo: jinfo: jid: 00010782 ACM jtl: Communications of the ACM issn: 00010782 maglogo: N pubinfo: dt: Nov2011 vid: 54 iid: 11 pid: 68 pub: Association for Computing Machinery artinfo: ui: 70368666 10.1145/2018396.2018419 ppf: 93 ppct: 9 formats: tig: atl: Making information flow explicit in HiStar. aug: au: Zeldovich, Nickolai Boyd-Wickizer, Silas Kohler, Eddie Mazières, David affil: University of California, los angeles, Ca. Stanford university, stanford, Ca. su: Computer operating systems Computer security Scanning systems Data security Computer network security World Wide Web Computer software Computer architecture Management sug: subj: Computer operating systems Computer security Scanning systems Data security Computer network security World Wide Web Computer software Computer architecture Management ab: HiStar is a new operating system designed to minimize the amount of code that must be trusted. HiStar provides strict information flow control, which allows users to specify precise data security policies without unduly limiting the structure of applications. HiStar's security features make it possible to implement a Unix-like environment with acceptable performance almost entirely in an untrusted user-level library. The system has no notion of superuser and no fully trusted code other than the kernel. HiStar's features permit several novel applications, including privacy-preserving, untrusted virus scanners and a dynamic Web server with only a few thousand lines of trusted code. pubtype: Periodical doctype: Article src: R language: English refInfo: copyright: @attributes: flag: Y dt: @attributes: year: 2011 holdings: @attributes: islocal: N |
|---|