Outline for October 9, 2014

Reading: text, § 15
  1. Access Control Lists
    1. Full access control lists
    2. UNIX method
    3. ACLs: describe, revocation issue
  2. Capabilities
    1. Capability-based addressing
    2. Inheritance of C-Lists
    3. Revocation: use of a global descriptor table
  3. Lock and Key
    1. Associate with each object a lock; associate with each process that has access to object a key (it’s a cross between ACLs and C-Lists)
    2. Example: use crypto (Gifford). X object enciphered with key K. Associate an opener R with X. Then:
      OR-Access: K can be recovered with any Di in a list of n deciphering transformations, so R = (E1(K), E2(K), …, En(K)) and any process with access to any of the Di’s can access the file
      AND-Access: need all n deciphering functions to get K: R = E1(E2(… En(K) …))
    3. Types and locks
You can also obtain a PDF version of this. Version of October 14, 2014 at 3:43PM
ECS 235A, Computer and Information Security
Fall Quarter 2014