Back to course homepage

• Introduction to the course
• Slides

• Access control matrices
• Partial order
• State transition systems
• Slides
• HW1

• Handout on Orders and Lattices (Latex Source)
• Anderson Book:
  • Sections 4.1 & 4.2 (Handout)
• Gollmann Book:
  • Chapter 3: Access Control (Handout)

• The Bell-LaPadula model
• Slides

• Note on BLP  (Handout)

• The Bell-LaPadula model (continued)
• (No new slides)

• Gollmann Book:
  • Chapter 4: Security Models (Handout)
• Optional reading:
  • D. Bell and L. LaPadula. "Secure computer systems: Unified exposition and Multics interpretation". Technical Report ESD-TR-75-306, MITRE Corp., March 1976.
    • Section II: Description of the Model
    • Complete Report
  • J. McLean: "Reasoning about security Models", in Oakland'1987.
  • D.E. Bell: "Concerning 'Modeling' of Computer Security", in Oakland'1988.

• Noninterference
• Nondeducability
• Slides

• Goguen and Meseguer.  "Security Policies and Security Models".  In Oakland'1982. 
• Optional reading:
  • D. Sutherland.  "A Model of Information", NCSC'1986.  (Handout)

• The Lattice Model of Information Flow
• The confinement problem
• Covert channels
• Slides
• HW2

• D. Denning.  "A Lattice Model of Secure Information Flow", CACM, May 1976.
• B. Lampson. "A note on the confinement problem." CACM, October 1973.
• S.B. Lipner, M. Bedford. "A Comment on the Confinement Problem", In SOSP, November 1975.

• The Biba integrity model
• Slides

• Clark-Wilson model
• The Chinese Wall policy
• Slides

• D.D. Clark and D.R. Wilson. "A Comparison of Commercial and Military Computer Security Policies" In Oakland, 1987.
• Optional Readings
  • D.F.C. Brewer and M.J. Nash: "The Chinese Wall Security Policy", in Oakland'1989.
  • R.S. Sandhu: "Lattice-Based Enforcement of Chinese Walls", in Computer & Security, December 1992.

• The Graham-Denning
• The HRU scheme
• Slides

• Class cancelled for distinguished lecture by Prof. David Patterson

• Safety analysis in HRU
• Slides

• M.A. Harrison, W.L. Ruzzo, and J.D. Ullman: Protection in Operating Systems. CACM, August 1976.

• Safety analysis revisited
• Slides

• R.S. Fabry: "One Perspective on the Results about the Decidability of System Safety".   (Handout)
• A.K. Jones: "Protection Mechanism Models: Their Usefulness"   (Handout)

• Overview of project topics
• No slides

• RBAC96
• NIST RBAC Standard
• Slides

• R.S. Sandhu, E.J. Coyne, H.L. Feinstein, and C.E. Youman. Role-Based Access Control Models. IEEE Computer, 29(2):38--47, February 1996.
• Optional reading:
  • ANSI Standard on Role-Based Access Control

• Separation of Duty in RBAC
• Slides

• N. Li, J. Byun, and E. Bertino: "A Critique of the ANSI Standard on Role Based Access Control", conditionally accepted to appear in IEEE Security & Privacy.  This is a slightly extended version.
• N. Li, Z. Bizri, and M.V.Tripunitara: "On Mutually-Exclusive Roles and Separation of Duty", Submitted.  Conference version appeared in CCS'2004.

• Constraint Generation in RBAC
• Slides

• Unix Access Control: ACL & setuid
• Slides

• Hao Chen. David Wagner. Setuid Demystified.  In USENIX Security 2002.

• Unix Access Control: Confining Programs, chroot, jail, and DTE
• Slides

• Best Practices for UNIX chroot() Operations
• Jail: Confining the Omnipotent Root.
• Confining Root Programs with Domain and Type Enforcement (DTE)

• Capabilities
• Slides

• N. Hardy: The Confused Deputy.  In Operating Systems Review, 22(4), 1988.
• M.S. Miller, K-P Yee, and J. Shapiro: Capability Myths Demolished.  Johns Hopkins Tech Report, 2003.
• Optional reading:  (Helpful in understanding the previous two papers)
  • N. Hardy: KeyKOS Architecture.  In Operating Systems Review, 19(4), 1985.

• Basics of Logic & Logic Programming
• Slides

• U. Nilsson and J. Maluszynski: Logic, Programming and Prolog
  • Chapters 2 & 3

• Guest Lecture by Jiangtao Li: Automated Trust Negotiation Using OACerts

  Slides

Thu  Mar 30

• Overview of Trust Management
• SDSI
• Slides

• M. Blaze, J. Feigebaum, and J. Lacy: Decentralized Trust Management. In Oakland'1996.
• D. Clarke et al.: Certificate chain discovery in SPKI/SDSI, JCS, November 2001.

• Continue previous lecture
• No new slides

Thu Apr 6

• Cancelled for Dorothy Denning's talk

• RT0 and Distributed Credential Chain Discovery
• Slides (in PPT)

• N. Li, W.H. Winsborough, and J.C. Mitchell: Distributed Credential Chain Discovery in Trust Management. Journal of Computer Security, February 2003.  Conference version in CCS 2001.
• N. Li, J.C.Mitchell, and W.H. Winsborough: Design of A Role-based Trust-management Framework.  IEEE Symposium on Security and Privacy, 2002.

• Review of the course
• Slides

• Isuru
• Yipeng

• Wonjun
• Tiancheng

• Qun
• Ziqing

• Jing
• Hong