A Verified Shared Capability Model | Zendy

Andrew Boyton | Zendy

AI Assistant Blog Pricing

Home ZAIA Blog

Open Access

A Verified Shared Capability Model

Author(s) -

Andrew Boyton

Publication year - 2009

Publication title -

electronic notes in theoretical computer science

Language(s) - English

Resource type - Journals

SCImago Journal Rank - 0.242

H-Index - 60

ISSN - 1571-0661

DOI - 10.1016/j.entcs.2009.09.058

Subject(s) - computer science , microkernel , access control , model checking , control (management) , distributed computing , theoretical computer science , computer security , operating system , artificial intelligence

This paper presents a high-level access control model of the seL4 microkernel. We extend an earlier formalisation by Elkaduwe et al with non-determinism, explicit sharing of capability storage, and a delete-operation for entities. We formally prove that this new model can enforce system-global security policies as well as authority confinement. By treating sharing explicitly in the abstract access control model we simplify considerably the refinement proof towards the seL4 implementation. To our knowledge this is the first machine-checked access control model with explicit sharing of authority

The content you want is available to Zendy users.

Already have an account? Click here to sign in.

Having issues? You can contact us here

Accelerating Research