Coordinating
Desired Accessibility versus Desired Restrictions in Distributed Object
Systems December 2000
Arnon Rosenthal, The MITRE Corporation
ABSTRACT
This work aims to provide administrators with services for managing
permissions in a distributed object system, by connecting business-level
tasks to access controls on low level functions. Specifically, the techniques
connect abilities (to complete externally-invoked functions) to the
access controls on individual functions, across all servers. Our main
results are the problem formalization, plus algorithms to synthesize
"least privilege" permissions for a given set of desired abilities.
Desirable extensions and numerous research issues are identified.
Additional Search Keywords
Access controls, distributed object management, security, business
tasks.
|
