Outline for January 3, 2007
-
Greetings and Felicitations!
-
Go over class handouts
-
Access control matrix and entities
-
Subject, objects (includes subjects)
-
State is (S, O, A) where A is access control matrix
-
Transitions modify access control matrix entries; primitive operations
-
enter r into A[s, o]
-
delete r from A[s, o]
-
create subject s (note that for all x, A[s′, x] = A[x, s′] = ∅)
-
create object o (note that for all x, A[x, o′] = ∅)
-
destroy subject s
-
destroy object o
-
Commands and examples
-
Regular command: create·file
-
Mono-operational command: make·owner
-
Conditional command: grant·rights
-
Biconditional command: grant·read·if·r·and·c
-
Doing "or" of 2 conditions: grant·read·if·r·or·c
-
General form
-
Miscellaneous points
-
Copy flag and right
-
Own as a special right
-
Principle of attenuation of privilege
Here is a PDF version of this document.