Cut me some security!

Divya Muthukumaran; Sandra Rueda; Hayawardh Vijayakumar; Trent Jaeger

doi:10.1145/1866898.1866911

Cut me some security!

Divya Muthukumaran, Sandra Rueda, Hayawardh Vijayakumar, Trent Jaeger

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

2 Scopus citations

Abstract

Computer security is currently fraught with fine-grained access control policies, in operating systems, applications and even programming languages. All this policy configuration means that too many decisions are left to administrators, developers and even users to some extent and as a result we do not get any comprehensive security guarantees. In this position paper, we take a stand for the idea that less policy is better and propose that limiting the choices given to parties along the development and deployment process leads to a more secure system. We argue that other systems processes like scheduling and memory management achieve their goals with minimal user input and access control configuration should also follow suit. We then suggest a technique to automate access control configuration using graph-cuts and show that this gets us closer to achieving our goal.

Original language	English (US)
Title of host publication	Proceedings of the 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10
Pages	75-78
Number of pages	4
DOIs	https://doi.org/10.1145/1866898.1866911
State	Published - 2010
Event	3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10 - Chicago, IL, United States Duration: Oct 4 2010 → Oct 8 2010

Publication series

Name	Proceedings of the ACM Conference on Computer and Communications Security
ISSN (Print)	1543-7221

Other

Other	3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10
Country/Territory	United States
City	Chicago, IL
Period	10/4/10 → 10/8/10

All Science Journal Classification (ASJC) codes

Software
Computer Networks and Communications

Access to Document

10.1145/1866898.1866911

Cite this

@inproceedings{824b5ac3df6045529ffb62e3f2ca53e8,

title = "Cut me some security!",

abstract = "Computer security is currently fraught with fine-grained access control policies, in operating systems, applications and even programming languages. All this policy configuration means that too many decisions are left to administrators, developers and even users to some extent and as a result we do not get any comprehensive security guarantees. In this position paper, we take a stand for the idea that less policy is better and propose that limiting the choices given to parties along the development and deployment process leads to a more secure system. We argue that other systems processes like scheduling and memory management achieve their goals with minimal user input and access control configuration should also follow suit. We then suggest a technique to automate access control configuration using graph-cuts and show that this gets us closer to achieving our goal.",

author = "Divya Muthukumaran and Sandra Rueda and Hayawardh Vijayakumar and Trent Jaeger",

year = "2010",

doi = "10.1145/1866898.1866911",

language = "English (US)",

isbn = "9781450300933",

series = "Proceedings of the ACM Conference on Computer and Communications Security",

pages = "75--78",

booktitle = "Proceedings of the 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10",

note = "3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10 ; Conference date: 04-10-2010 Through 08-10-2010",

}

Muthukumaran, D, Rueda, S, Vijayakumar, H & Jaeger, T 2010, Cut me some security! in Proceedings of the 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10., 1866911, Proceedings of the ACM Conference on Computer and Communications Security, pp. 75-78, 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10, Chicago, IL, United States, 10/4/10. https://doi.org/10.1145/1866898.1866911

Cut me some security! / Muthukumaran, Divya; Rueda, Sandra; Vijayakumar, Hayawardh et al.
Proceedings of the 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10. 2010. p. 75-78 1866911 (Proceedings of the ACM Conference on Computer and Communications Security).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Cut me some security!

AU - Muthukumaran, Divya

AU - Rueda, Sandra

AU - Vijayakumar, Hayawardh

AU - Jaeger, Trent

PY - 2010

Y1 - 2010

N2 - Computer security is currently fraught with fine-grained access control policies, in operating systems, applications and even programming languages. All this policy configuration means that too many decisions are left to administrators, developers and even users to some extent and as a result we do not get any comprehensive security guarantees. In this position paper, we take a stand for the idea that less policy is better and propose that limiting the choices given to parties along the development and deployment process leads to a more secure system. We argue that other systems processes like scheduling and memory management achieve their goals with minimal user input and access control configuration should also follow suit. We then suggest a technique to automate access control configuration using graph-cuts and show that this gets us closer to achieving our goal.

AB - Computer security is currently fraught with fine-grained access control policies, in operating systems, applications and even programming languages. All this policy configuration means that too many decisions are left to administrators, developers and even users to some extent and as a result we do not get any comprehensive security guarantees. In this position paper, we take a stand for the idea that less policy is better and propose that limiting the choices given to parties along the development and deployment process leads to a more secure system. We argue that other systems processes like scheduling and memory management achieve their goals with minimal user input and access control configuration should also follow suit. We then suggest a technique to automate access control configuration using graph-cuts and show that this gets us closer to achieving our goal.

UR - http://www.scopus.com/inward/record.url?scp=78650130609&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=78650130609&partnerID=8YFLogxK

U2 - 10.1145/1866898.1866911

DO - 10.1145/1866898.1866911

M3 - Conference contribution

AN - SCOPUS:78650130609

SN - 9781450300933

T3 - Proceedings of the ACM Conference on Computer and Communications Security

SP - 75

EP - 78

BT - Proceedings of the 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10

T2 - 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10

Y2 - 4 October 2010 through 8 October 2010

ER -

Cut me some security!

Abstract

Publication series

Other

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this