Note-6

Note-6 - CSE 467/598 Data and Information Security Prof....

Info iconThis preview shows pages 1–6. Sign up to view the full content.

View Full Document Right Arrow Icon
CSE 467/598 Data and Information Security Prof. Gail-Joon Ahn 2 ! Access Control Lists ! Capabilities ! Relations U r w own V F G r
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
F U:r U:w U:own G U:r V:r V:w V:own ! each column of the access matrix is stored with the object corresponding to that column 3 ! each row of the access matrix is stored with the subject corresponding to that row F/r, F/w, F/own, G/r G/r, G/w, G/own U V 4
Background image of page 2
5 ! Relational database management system commonly uses this Subject Access Object U R F U W F U Own F U r G V R G V W G V own G ACL VS CAPABILITY 6 File c File b File a /project User: rights . . User: rights Rights: File a, Rights: Fila b File a File b user Per-Object basis Per-Subject basis
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
7 CAPABILITY LISTS F/r, F/w, F/own, G/r G/r, G/w, G/own U V G/r, G/w, F/r , G/own ? G/r, G/w, G/own F/r based on the slides for "Computer Security: Art and Science" 8 Primitive Operations on ACM ! create subject s ! Creates new row, column in ACM ! create object o ! Creates new column in ACM ! destroy subject s ! Deletes row, column from ACM; ! destroy object o ! Deletes column from ACM ! enter r into A [ s , o ] ! Adds r rights for subject s over object o ! delete r from A [ s , o ] ! Removes r rights from subject s over object o
Background image of page 4
based on the slides for "Computer Security: Art and Science" 9 Create Subject ! Precondition: s ! S !
Background image of page 5

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Image of page 6
This is the end of the preview. Sign up to access the rest of the document.

Page1 / 13

Note-6 - CSE 467/598 Data and Information Security Prof....

This preview shows document pages 1 - 6. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online