Making information flow explicit in HiStar.

HiStar is a new operating system designed to minimize the amount of code that must be trusted. HiStar provides strict information flow control, which allows users to specify precise data security policies without unduly limiting the structure of applications. HiStar's security features make it possi...

Full description

Bibliographic Details
Published in:Communications of the ACM Vol. 54; no. 11; pp. 93 - 102
Main Authors: Zeldovich, Nickolai, Boyd-Wickizer, Silas, Kohler, Eddie, Mazières, David
Format: Article
Published: Association for Computing Machinery Nov2011
Subjects:
Online Access:View this record in EBSCOhost
fields @attributes:
  recordID: 1
pdfLink:
plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=70368666&site=ehost-live
header:
  @attributes:
    shortDbName: hlh
    uiTerm: 70368666
    longDbName: Humanities International Complete
    uiTag: AN
  controlInfo:
    bkinfo:
    jinfo:
      jid:
        00010782
        ACM
      jtl: Communications of the ACM
      issn: 00010782
      maglogo: N
    pubinfo:
      dt: Nov2011
      vid: 54
      iid: 11
      pid: 68
      pub: Association for Computing Machinery
    artinfo:
      ui:
        70368666
        10.1145/2018396.2018419
      ppf: 93
      ppct: 9
      formats:
      tig:
        atl: Making information flow explicit in HiStar.
      aug:
        au:
          Zeldovich, Nickolai
          Boyd-Wickizer, Silas
          Kohler, Eddie
          Mazières, David
        affil:
          University of California, los angeles, Ca.
          Stanford university, stanford, Ca.
      su:
        Computer operating systems
        Computer security
        Scanning systems
        Data security
        Computer network security
        World Wide Web
        Computer software
        Computer architecture
        Management
      sug:
        subj:
          Computer operating systems
          Computer security
          Scanning systems
          Data security
          Computer network security
          World Wide Web
          Computer software
          Computer architecture
          Management
      ab: HiStar is a new operating system designed to minimize the amount of code that must be trusted. HiStar provides strict information flow control, which allows users to specify precise data security policies without unduly limiting the structure of applications. HiStar's security features make it possible to implement a Unix-like environment with acceptable performance almost entirely in an untrusted user-level library. The system has no notion of superuser and no fully trusted code other than the kernel. HiStar's features permit several novel applications, including privacy-preserving, untrusted virus scanners and a dynamic Web server with only a few thousand lines of trusted code.
      pubtype: Periodical
      doctype: Article
      src: R
    language: English
    refInfo:
    copyright:
      @attributes:
        flag: Y
      dt:
        @attributes:
          year: 2011
    holdings:
      @attributes:
        islocal: N