Integration of a cryptographic file system and access control

Authors:
SeongKi Kim;WanJin Park;SeokKyoo Kim;SunIl Ahn;SangYong Han
Affiliations:
School of Computer Science and Engineering, Seoul National University, Seoul, Korea;School of Computer Science and Engineering, Seoul National University, Seoul, Korea;School of Computer Science and Engineering, Seoul National University, Seoul, Korea;School of Computer Science and Engineering, Seoul National University, Seoul, Korea;School of Computer Science and Engineering, Seoul National University, Seoul, Korea
Venue:
WISI'06 Proceedings of the 2006 international conference on Intelligence and Security Informatics
Year:
2006

Citing 10
Cited 0

A cryptographic file system for UNIX

CCS '93 Proceedings of the 1st ACM conference on Computer and communications security
File-system development with stackable layers

ACM Transactions on Computer Systems (TOCS) - Special issue on operating systems principles
Solaris internals: core kernel architecture

Solaris internals: core kernel architecture
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
A graph-based formalism for RBAC

ACM Transactions on Information and System Security (TISSEC)
The Design and Implementation of a Transparent Cryptographic File System for UNIX

Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference
Integrating Flexible Support for Security Policies into the Linux Operating System

Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference
Cryptographic File Systems Performance: What You Don't Know Can Hurt You

SISW '03 Proceedings of the Second IEEE International Security in Storage Workshop
The flask security architecture: system support for diverse security policies

SSYM'99 Proceedings of the 8th conference on USENIX Security Symposium - Volume 8
FiST: a language for stackable file systems

ATEC '00 Proceedings of the annual conference on USENIX Annual Technical Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

The importance of kernel-level security mechanisms such as a file system and access control has been increasingly emphasized as weaknesses in user-level applications. However, when using only access control, including role-based access control (RBAC), a system is vulnerable to a low-level or physical attack. In addition, when using only a cryptographic file system, a system also has a weakness that it is unable to protect itself. To overcome these vulnerabilities, we integrated a cryptographic file system into the access control, and developed a prototype.