Journal of Computer Security · 2005 · 85 citations · 9 references
ComputingComputer ScienceComputer SystemsComputer SecurityOperating SystemsSecurity PolicyAccess ControlAuthorizationOperating System SecuritySecure System DesignSecurity ControlsSystem SecurityInformation Flow AnalysisKernel SecurityKernel-level Security ControlsSecure Information FlowSecure Operating System DesignSecurity EnforcementSelinux Policy TestingSpecification-based Security
In this paper, we present a systematic way to determine the information flow security goals achieved by systems running a secure O/S, specifically systems running Security-Enhanced Linux. A formalization of the access control mechanism of the SELinux
9