Click here for full text:
Split Capabilities for Access Control
Karp, Alan H.; Gupta, Rajiv; Rozas, Guillermo; Banerji, Arindam
HPL-2001-164R1
Keyword(s): access control; computer security; capability systems
Abstract: Split capabilities represent a new way to control access to resources that has advantages over traditional approaches in both scalability and revocation of privileges. We present the basic idea of split capabilities and describe how they were used in a commercial system. We also explain why a variety of common attacks against a system using split capabilities fail. Notes: Copyright IEEE To be published in IEEE Software
13 Pages
Back to Index
| 
printable version
