The Birlix Security Architecture

Abstract

A security architecture is a complete framework that allows coexisting application specific and environment dependant security policies to be enforced by applying security mechanisms in a consistent manner. It is argued that such a security architecture can be derived smoothly from an object-oriented architecture such as BirliX. BirliX applications run on an abstract machine that supports types and instances of types. Applications are clusters of instances interacting by method calls. The BirliX Security Architecture provides means to control the invocations and to control how to avoid the abstract machine being subverted.

Both access control and abstract machine protection are controlled by systems administrators and by users to support application dependent security policies.

Get full access to this article

View all access options for this article.

References

Almes

Guy T.

and Black

Andrew P.

and Lazowska

Edward D.

and Noe

Jerre D.

, "The Eden System: A Technical Review", Transactions On Software Engineering 11(1), (1985), 43–59.

Bell

D. Elliot

and LaPadula

Leonard J.

, Secure Computer Systems: Unified Exposition and Multics Interpretation, Technical Report, (1976).

Eichin

Mark W.

and Rochlis

Jon A.

, With Microscope and Tweezers: An Analysis of the Internet Virus of November 1988, Proceedings of the IEEE Symposium on Security and Privacy, pp. 326–343, (1989).

Gasser

Morrie

and Goldstein

Andy

and Kaufman

Charlie

and Lampson

Butler

, The Digital Distributed System Security Architecture, 12th National Computer Security Conference, pp. 305–319, (1989).

Groß

Michael

, Vertrauenswürdiges Booten als Grundlage authentischer Basissysteme, Verlässliche Informationssysteme (VIS'91), (1991).

Härtig

and Kühnhauser

W.E.

and Lux

and Reck

, Operating System(s) on Top of Persistent Object Systems - The BirliX Approach, Proceedings of the 25th Hawaii International Conference on System Sciences, pp. 790–799, (1992).

Kowalski

Oliver C.

and Härtig

Hermann

, Protection in the BirliX Operating System, Proceedings of the 10th International Conference on Distributed Computing Systems, pp. 160–166, (1990).

Lampson

Butler

and Abadi

Martin

and Burrows

Michael

and Wobber

Edward

, Authentication in Distributed Systems: Theorie and Practice, Proceedings of the 13th ACM Symposium on Operating Systems Priciples, pp. 165–182, (1991).

Landauer

, TMach, Schloß Dagstuhl System Security Conference, (1992).

10.

Liedtke

and Bartling

and Beyer

and Heinrichs

and Ruland

and Szalay

, "Two Years of Experience with a Mikro-Kernel Based OS", ACM Operating Systems Review 25(2), (1991), 51–62.

11.

Liedtke

Jochen

, Clans & Chiefs, Proceedings of the 12th GI Fachtagung, (1992).

12.

Lux

and Härtig

and Kühnhauser

W.E.

, Migrating Multi-Threaded Shared Objects, Proceedings of the 26th Annual Hawaii International Conference on System Science, pp. 642–649, (1993).

13.

Millen

Jonathan K.

, A Resource Allocation Model for Denial of Service, Proceedings of the IEEE Symposium on Security and Privacy, pp. 137–147, (1992).

14.

Randell

Brian

and Fabre

Jean-Charles

, Fault and Intrusion in Object-Oriented Systems, Proceedings of the International Workshop on Object Orientation in Operating Systems, pp. 180–184, (1991).

15.

Steiner

J.G.

and Neumann

B.B.

and Schiller

J.I.

, Kerberos: An Authentication Service for Open Network Systems, Proceedings of the Winter 1988 Usenix Conference, pp. 191–201, (1988).

16.

CCITT, Recommendation X.509: The Directory-Authentication Framework, Manual, (1988).

17.

Che-Fn

and Gligor

Virgil D.

, A Formal Specification and Verification Method for the Prevention of Denial of Service, Proceedings of the IEEE Symposium on Security and Privacy, pp. 187–202, (1988).