DTEvisual: a visualization system for teaching access control using Domain Type Enforcement

Authors:
Yifei Li;Steve Carr;Jean Mayo;Ching-Kuang Shene;Chaoli Wang
Affiliations:
Michigan Technological University, Houghton, MI;Michigan Technological University, Houghton, MI;Michigan Technological University, Houghton, MI;Michigan Technological University, Houghton, MI;Michigan Technological University, Houghton, MI
Venue:
Journal of Computing Sciences in Colleges
Year:
2012

Citing 8
Cited 0

Role-Based Access Control Models

Computer
Drawing graphs nicely using simulated annealing

ACM Transactions on Graphics (TOG)
Graph Drawing: Algorithms for the Visualization of Graphs

Graph Drawing: Algorithms for the Visualization of Graphs
Practical Domain and Type Enforcement for UNIX

SP '95 Proceedings of the 1995 IEEE Symposium on Security and Privacy
ThreadMentor: a pedagogical tool for multithreaded programming

Journal on Educational Resources in Computing (JERIC)
SELinux: NSA's Open Source Security Enhanced Linux

SELinux: NSA's Open Source Security Enhanced Linux
Confining root programs with domain and type enforcement (DTE)

SSYM'96 Proceedings of the 6th conference on USENIX Security Symposium, Focusing on Applications of Cryptography - Volume 6
Teaching access control with domain type enforcement

Journal of Computing Sciences in Colleges

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper describes DTEvisual, a visualization system that leverages Domain Type Enforcement (DTE) for access control education. Domain Type Enforcement (DTE) is a powerful abstraction for teaching students about policy complexity and application of the principle of least privilege, mandatory access control and modern models of access control. DTEvisual facilitates graphical depiction, construction, and modification of a DTE policy. It also allows isolation of selected portions of a depicted policy. Finally, a query subsystem identifies the set of files that can be accessed by a specified process under the depicted policy. We anticipate this tool will be useful for classroom presentations, homework assignments, and self-study.