User-Driven Access Control: Rethinking Permission ... - CiteSeerX

Extrait du fichier (au format texte) :

User-Driven Access Control:
Rethinking Permission Granting in Modern Operating Systems
Franziska Roesner, Tadayoshi Kohno
{franzi, yoshi}@cs.washington.edu
University of Washington

Alexander Moshchuk, Bryan Parno, Helen J. Wang
{alexmos, parno, helenw}@microsoft.com
Microsoft Research, Redmond

Crispin Cowan crispin@microsoft.com
Microsoft
Abstract

tionality and security for access to the user s data and resources. From a functionality standpoint, isolation inhibits the client-side manipulation of user data across arbitrary applications. For example, the isolation of web sites makes it difficult to share photos between two online providers
(e.g., Picasa and Flickr) without manually downloading and re-uploading them. (While two such applications can prenegotiate data exchanges through IPC channels or other APIs,
requiring every pair of applications used by a user to prenegotiate is inefficient or impossible.) From a security standpoint, existing access control mechanisms tend to be coarsegrained, abrasive, or inadequate. For instance, they require users to make out-of-context, uninformed decisions at install time via manifests [3, 6], or they unintelligently prompt users to determine their intent [5, 20].
Thus, a pressing open problem in these systems is how to allow users to grant applications access to user-owned resources spanning different isolation boundaries, defined as privacy-and cost-sensitive devices and sensors (such as the camera, GPS, or SMS capabilities), system services and settings (such as the contact list or clipboard), and user content stored with various applications (such as photos or documents). To address this problem, we propose user-driven access control, whereby the system captures user intent via authentic user actions in the context of applications.
In particular, we introduce access control gadgets (ACGs)
as an operating system technique to capture user intent. Each user-owned resource exposes UI elements called ACGs for applications to embed. The user s authentic UI interactions with an ACG grant the embedding application permission to access the corresponding resource. Our design ensures the display integrity of ACGs, resists tampering by malicious applications, and allows the system to translate authentic user input on the ACGs into permissions.
The ACG mechanism enables a permission granting system that minimizes unintended access by letting users grant permissions at the time of use (unlike the manifest model)
and minimizes the burden on users by implicitly extracting a

Modern client platforms, such as iOS, Android, Windows
Phone, Windows 8, and web browsers, run each application in an isolated environment with limited privileges. A pressing open problem in such systems is how to allow users to grant applications access to user-owned resources, e.g., to privacyand cost-sensitive devices like the camera or to user data residing in other applications. A key challenge is to enable such access in a way that is non-disruptive to users while still maintaining least-privilege restrictions on applications.
In this paper, we take the approach of user-driven access control, whereby permission granting is built into existing

Les promotions



C dric FOURNET LE JOIN-CALCUL : UN CALCUL POUR ... - Microsoft
C dric FOURNET LE JOIN-CALCUL : UN CALCUL POUR ... - Microsoft
11/04/2018 - www.microsoft.com
TH SE pr sent e L' COLE POLYTECHNIQUE pour obtenir le titre de DOCTEUR DE L' COLE POLYTECHNIQUE sp cialit : INFORMATIQUE par C dric FOURNET Sujet de la th se : LE JOIN-CALCUL : UN CALCUL POUR LA PROGRAMMATION R PARTIE ET MOBILE The Join-Calculus: a Calculus for Distributed Mobile Programming Soutenue le 23 Novembre 1998 devant le jury compos de : MM. Robin Milner Roberto Amadio G rard Boudol Jean-Jacques L vy G rard Berry Luca Cardelli Georges Gonthier Pr sident Rapporteurs Directeur de th...

Microsoft Modern Work Plan Comparison Education 11 2021
Microsoft Modern Work Plan Comparison Education 11 2021
14/09/2024 - www.microsoft.com
Add-on licenses Endpoint and app management Microsoft Product Terms Desktop client apps1 %? %? %? %? %? Office Mobile apps2 %? %? %? %? %? %? Install apps on up to 5 PCs/Mac + 5 tablets + 5 smartphones %?3 %? %? %?3 %? %? Office for the web %? %?

User-Driven Access Control: Rethinking Permission ... - CiteSeerX
User-Driven Access Control: Rethinking Permission ... - CiteSeerX
23/08/2018 - www.microsoft.com
User-Driven Access Control: Rethinking Permission Granting in Modern Operating Systems Franziska Roesner, Tadayoshi Kohno {franzi, yoshi}@cs.washington.edu University of Washington Alexander Moshchuk, Bryan Parno, Helen J. Wang {alexmos, parno, helenw}@microsoft.com Microsoft Research, Redmond Crispin Cowan crispin@microsoft.com Microsoft Abstract tionality and security for access to the user s data and resources. From a functionality standpoint, isolation inhibits the client-side manipulation...

MatrixExplorer: Un système pour l'analyse exploratoire de ... - Microsoft
MatrixExplorer: Un système pour l'analyse exploratoire de ... - Microsoft
22/05/2017 - www.microsoft.com
MatrixExplorer: Un système pour l analyse exploratoire de réseaux sociaux Nathalie Henry Jean-Daniel Fekete INRIA Futurs/LRI/University of Sydney Bât 490, Université Paris-Sud 91405 Orsay Cedex Nathalie.Henry@lri.fr INRIA Futurs/LRI Bât 490, Université Paris-Sud 91405 Orsay Cedex Jean-Daniel.Fekete@inria.fr RESUME ABSTRACT Dans cet article, nous présentons le système MatrixExplorer destiné à explorer des réseaux sociaux. Il a été conçu pour des chercheurs en sciences sociales...

MSR Quantum applications - Microsoft
MSR Quantum applications - Microsoft
23/08/2018 - www.microsoft.com
( What Can We Do with a Quantum Computer? ( Matthias Troyer  Station Q, ETH Zurich | 1 Classical computers have come a long way Antikythera mechanism ENIAC astronomical positions (1946) (100 BC) Kelvin s harmonic analyzer prediction of tides (1878) Difference Engine (1822) Is there anything that we cannot solve on future supercomputers? Titan, ORNL (2013) Matthias Troyer | | 2 How long will Moore s law continue? Do we see signs of the end of Moore s law? Can we go below 7nm...

1 Introduction - Microsoft
1 Introduction - Microsoft
11/04/2018 - www.microsoft.com
One-Way Accumulators: A Decentralized Alternative to Digital Signatures (Extended Abstract) Josh Benaloh Clarkson University Michael de Mare Giordano Automation Abstract This paper describes a simple candidate one-way hash function which satis es a quasi-commutative property that allows it to be used as an accumulator. This property allows protocols to be developed in which the need for a trusted central authority can be eliminated. Space-e cient distributed protocols are given for document time...

Vers une approche simplifiée pour introduire le caractère ... - Microsoft
Vers une approche simplifiée pour introduire le caractère ... - Microsoft
23/11/2017 - www.microsoft.com
See discussions, stats, and author profiles for this publication at: https://www.researchgate.net/publication/262881208 Vers une approche simplifiée pour introduire le caractère incrémental dans les systèmes de dialogue Conference Paper · July 2014 CITATION READS 1 26 3 authors, including: Hatim Khouzaimi Romain Laroche Orange Labs / Laboratoire Informatique d'Avi & Microsoft Maluuba 12 PUBLICATIONS 42 CITATIONS 58 PUBLICATIONS 185 CITATIONS SEE PROFILE All content following this page was uploaded by Hatim Khouzaimi on 28 April 2015. The user has requested enhancement of the downloaded file. SEE PROFILE 21ème...

L'économie de la sécurité - Microsoft
L'économie de la sécurité - Microsoft
16/11/2016 - www.microsoft.com
nl y se Lect L économie de la sécurité Ces dernières années, la sécurité est devenue une priorité pour les pouvoirs publics et les entreprises. Crime organisé, terrorisme, interruption des chaînes d approvisionnement mondiales, virus informatiques  autant de menaces avec lesquelles il faut compter dans le monde d aujourd hui. D où l émergence d un marché des équipements et des services de sécurité de 100 milliards de dollars. Ce marché est alimenté par la demande croissante émanant...
 
 

WD TV Media Player
WD TV Media Player
11/04/2012 - www.wdc.com
WD TV HD Media Player TM Table des matières 1 Informations utilisateur importantes . . . . . . . . . . . . .1 Informations importantes sur la sécurité . . . . . . . . . . . . . . . . . . . . . . . . 1 Assistance technique WD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Enregistrement de vos informations produit WD . . . . . . . . . . . . . . . . 4 Enregistrement de votre produit WD. . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Accessoires . . . . . . . ....

Fiche produit Sony : 12/1207064682812.pdf
Fiche produit Sony : 12/1207064682812.pdf
16/02/2012 - www.sony.fr
Paris, le 31 Mars 2008 Téléviseurs LCD BRAVIA série W4000 : le meilleur de l'image dans un design exclusif · · · Design d'exception et nouveau mode Personal Image Full HD 1080p avec tuner TNT Haute Définition intégré Technologie BRAVIA ENGINE 2 conçue pour la Haute Définition Les téléviseurs LCD BRAVIA de la série W4000 de Sony représentent l'avenir de la télévision. Grâce à un impressionnant assortiment de technologies, ces modèles créent une image parfaite et offrent ainsi...

Zone True Wireless Earbuds
Zone True Wireless Earbuds
14/03/2025 - www.logitech.com
DATASHEET ZONE TRUE WIRELESS EARBUDS Stay focused and in the zone with Zone True Wireless Bluetooth? earbuds. The certified noisecanceling mics, hybrid ANC and immersive sound are ideal for collaboration in busy workspaces without compromising on the quality, productivity or creativity. Logitech Zone True Wireless delivers immersive experiences that help you sound clear, stay connected and confident. Three mics in each earbud (6 total) distinguish your voice from other sounds through a combination...

R580 E7P-C3330 (NP-R580-JS01FR)
R580 E7P-C3330 (NP-R580-JS01FR)
13/02/2012 - www.samsung.com
Windows®. La vie sans limites. Samsung recommande Windows 7. R580 E7P-C3330 R580 E7P-C3330 NP-R580-JS01FR 880 8993 701 438 Affichage Ecran 14'' HD 16:9 (1366 x 768) SuperBright Gloss LED 3072 Mo (1x2048 + 1x1024 Mo) DDR3 SODIMM (800MHz PC2-5300) Elégance et puissance pour un effet cristal intense * Condition de test : Logiciel BatteryMark 4.0.1, Samsung Battery Mode optimisé, Luminosité minimum, Wi-Fi Off ** Condition de test : Lecture continue d'un film en format DivX stocké sur le disque...

C/ntr-usa-1 - Nintendo
C/ntr-usa-1 - Nintendo
02/12/2014 - www.nintendo.com
C/NTR-USA-1 NEED HELP WITH INSTALLATION, MAINTENANCE OR SERVICE? NINTENDO CUSTOMER SERVICE: WWW.NINTENDO.COM or call 1-800-255-3700, MON.-SUN., 6:00 a.m. to 7:00 p.m, Pacific Time (Times subject to change) TTY Hearing Impaired: 800-422-4281 BESOIN D'AIDE AVEC L'INSTALLATION, L'ENTRETIEN OU LE SERVICE ? SERVICE À LA CLIENTÈLE DE NINTENDO: www.nintendo.ca Ou appelez le 1-800-255-3700 LUN.-DIM., entre 6 h 00 et 19 h 00 , heure du Pacifique. (Heures sujettes à changement) Service à la clientèle...

SCB92MX8 - Pulsat
SCB92MX8 - Pulsat
29/06/2016 - www.smeg.fr
SCB92MX8 classica SMEG ELITE Centre de cuisson, 90 cm, inox, double four dont 1 vapor clean catalyse, chaleur tournante Classe énergétique : A Grand Four - A Petit Four EAN13: 8017709149963 Plan de cuisson gaz : 5 brûleurs dont : Arrière gauche : 1,80 kW Avant gauche : 3,00 kW Central : ultra-rapide 3,50 kW Arrière droit : 1,80 kW Avant droit : 1,00 kW Puissance nominale gaz : 11,10 kW Grilles en fonte Chapeaux de brûleurs émaillés fonte Allumage électronique intégré aux manettes Sécurité...