LEAST PRIVILEGE IN SEPARATION KERNELS
Timothy E. Levin, Cynthia E. Irvine, Thuy D. Nguyen · 2006
Abstract. We extend the separation kernel abstraction to represent the en-forcement of the principle of least privilege. In addition to the inter-block flow control policy prescribed by the traditional separation kernel paradigm, we describe an orthogonal, finer-grained flow control policy by extending the pro-tection of elements to subjects and resources, as well as blocks, within a parti-tioned system. We show how least privilege applied to the actions of subjects provides enhanced protection for secure systems.