User-Driven Access Control: Rethinking Permission ... - CiteSeerX

Extrait du fichier (au format texte) :

User-Driven Access Control:
Rethinking Permission Granting in Modern Operating Systems
Franziska Roesner, Tadayoshi Kohno
{franzi, yoshi}@cs.washington.edu
University of Washington

Alexander Moshchuk, Bryan Parno, Helen J. Wang
{alexmos, parno, helenw}@microsoft.com
Microsoft Research, Redmond

Crispin Cowan crispin@microsoft.com
Microsoft
Abstract

tionality and security for access to the user s data and resources. From a functionality standpoint, isolation inhibits the client-side manipulation of user data across arbitrary applications. For example, the isolation of web sites makes it difficult to share photos between two online providers
(e.g., Picasa and Flickr) without manually downloading and re-uploading them. (While two such applications can prenegotiate data exchanges through IPC channels or other APIs,
requiring every pair of applications used by a user to prenegotiate is inefficient or impossible.) From a security standpoint, existing access control mechanisms tend to be coarsegrained, abrasive, or inadequate. For instance, they require users to make out-of-context, uninformed decisions at install time via manifests [3, 6], or they unintelligently prompt users to determine their intent [5, 20].
Thus, a pressing open problem in these systems is how to allow users to grant applications access to user-owned resources spanning different isolation boundaries, defined as privacy-and cost-sensitive devices and sensors (such as the camera, GPS, or SMS capabilities), system services and settings (such as the contact list or clipboard), and user content stored with various applications (such as photos or documents). To address this problem, we propose user-driven access control, whereby the system captures user intent via authentic user actions in the context of applications.
In particular, we introduce access control gadgets (ACGs)
as an operating system technique to capture user intent. Each user-owned resource exposes UI elements called ACGs for applications to embed. The user s authentic UI interactions with an ACG grant the embedding application permission to access the corresponding resource. Our design ensures the display integrity of ACGs, resists tampering by malicious applications, and allows the system to translate authentic user input on the ACGs into permissions.
The ACG mechanism enables a permission granting system that minimizes unintended access by letting users grant permissions at the time of use (unlike the manifest model)
and minimizes the burden on users by implicitly extracting a

Modern client platforms, such as iOS, Android, Windows
Phone, Windows 8, and web browsers, run each application in an isolated environment with limited privileges. A pressing open problem in such systems is how to allow users to grant applications access to user-owned resources, e.g., to privacyand cost-sensitive devices like the camera or to user data residing in other applications. A key challenge is to enable such access in a way that is non-disruptive to users while still maintaining least-privilege restrictions on applications.
In this paper, we take the approach of user-driven access control, whereby permission granting is built into existing

Les promotions



MSFT SurfaceLaptopIntel 5g Fact Sheet
MSFT SurfaceLaptopIntel 5g Fact Sheet
02/10/2025 - www.microsoft.com
Windows Hello for Business with facial recognition and Enhanced Sign-In Security Surface Laptop 5G for Business Near-edgeless display and Surface's signature 3:2 ratio for more screen in a compact footprint Premium experiences drive AI advantage anywhere NPUs delivering 40 or 48 TOPS of on-device AI performance to support today's capabilities and tomorrow's innovations5 Anti-reflective technology reduces reflections up to 50% Exceptional AI-enabled collaboration and Copilot+ PC1 productivity...

MSR Quantum applications - Microsoft
MSR Quantum applications - Microsoft
23/08/2018 - www.microsoft.com
( What Can We Do with a Quantum Computer? ( Matthias Troyer  Station Q, ETH Zurich | 1 Classical computers have come a long way Antikythera mechanism ENIAC astronomical positions (1946) (100 BC) Kelvin s harmonic analyzer prediction of tides (1878) Difference Engine (1822) Is there anything that we cannot solve on future supercomputers? Titan, ORNL (2013) Matthias Troyer | | 2 How long will Moore s law continue? Do we see signs of the end of Moore s law? Can we go below 7nm...

L'économie de la sécurité - Microsoft
L'économie de la sécurité - Microsoft
16/11/2016 - www.microsoft.com
nl y se Lect L économie de la sécurité Ces dernières années, la sécurité est devenue une priorité pour les pouvoirs publics et les entreprises. Crime organisé, terrorisme, interruption des chaînes d approvisionnement mondiales, virus informatiques  autant de menaces avec lesquelles il faut compter dans le monde d aujourd hui. D où l émergence d un marché des équipements et des services de sécurité de 100 milliards de dollars. Ce marché est alimenté par la demande croissante émanant...

DSCOVR: Randomized Primal-Dual Block Coordinate ... - Microsoft
DSCOVR: Randomized Primal-Dual Block Coordinate ... - Microsoft
23/08/2018 - www.microsoft.com
DSCOVR: Randomized Primal-Dual Block Coordinate Algorithms for Asynchronous Distributed Optimization lin.xiao@microsoft.com Lin Xiao Microsoft Research AI Redmond, WA 98052, USA weiyu@cs.cmu.edu Adams Wei Yu Machine Learning Department, Carnegie Mellon University Pittsburgh, PA 15213, USA qihang-lin@uiowa.edu Qihang Lin Tippie College of Business, The University of Iowa Iowa City, IA 52245, USA wzchen@microsoft.com Weizhu Chen Microsoft AI and Research Redmond, WA 98052, USA October 13,...

MatrixExplorer: Un système pour l'analyse exploratoire de ... - Microsoft
MatrixExplorer: Un système pour l'analyse exploratoire de ... - Microsoft
22/05/2017 - www.microsoft.com
MatrixExplorer: Un système pour l analyse exploratoire de réseaux sociaux Nathalie Henry Jean-Daniel Fekete INRIA Futurs/LRI/University of Sydney Bât 490, Université Paris-Sud 91405 Orsay Cedex Nathalie.Henry@lri.fr INRIA Futurs/LRI Bât 490, Université Paris-Sud 91405 Orsay Cedex Jean-Daniel.Fekete@inria.fr RESUME ABSTRACT Dans cet article, nous présentons le système MatrixExplorer destiné à explorer des réseaux sociaux. Il a été conçu pour des chercheurs en sciences sociales...

User-Driven Access Control: Rethinking Permission ... - CiteSeerX
User-Driven Access Control: Rethinking Permission ... - CiteSeerX
23/08/2018 - www.microsoft.com
User-Driven Access Control: Rethinking Permission Granting in Modern Operating Systems Franziska Roesner, Tadayoshi Kohno {franzi, yoshi}@cs.washington.edu University of Washington Alexander Moshchuk, Bryan Parno, Helen J. Wang {alexmos, parno, helenw}@microsoft.com Microsoft Research, Redmond Crispin Cowan crispin@microsoft.com Microsoft Abstract tionality and security for access to the user s data and resources. From a functionality standpoint, isolation inhibits the client-side manipulation...

1 Introduction - Microsoft
1 Introduction - Microsoft
11/04/2018 - www.microsoft.com
One-Way Accumulators: A Decentralized Alternative to Digital Signatures (Extended Abstract) Josh Benaloh Clarkson University Michael de Mare Giordano Automation Abstract This paper describes a simple candidate one-way hash function which satis es a quasi-commutative property that allows it to be used as an accumulator. This property allows protocols to be developed in which the need for a trusted central authority can be eliminated. Space-e cient distributed protocols are given for document time...

DictaNum : système de dialogue incrémental pour la dictée ... - Microsoft
DictaNum : système de dialogue incrémental pour la dictée ... - Microsoft
23/11/2017 - www.microsoft.com
See discussions, stats, and author profiles for this publication at: https://www.researchgate.net/publication/262881756 DictaNum : système de dialogue incrémental pour la dictée de numéros. Conference Paper · July 2014 CITATIONS READS 0 57 3 authors, including: Hatim Khouzaimi Romain Laroche Orange Labs / Laboratoire Informatique d'Avi & Microsoft Maluuba 12 PUBLICATIONS 42 CITATIONS 58 PUBLICATIONS 185 CITATIONS SEE PROFILE SEE PROFILE All content following this page was uploaded by Hatim Khouzaimi on 06 June 2014. The user has requested enhancement of the downloaded file. 21ème...
 
 

Fiche produit Sony : 63/1242292623463.pdf
Fiche produit Sony : 63/1242292623463.pdf
16/02/2012 - www.sony.fr
Du 15 mai au 25 juin 2009 Sony souhaite bonne fête aux mamans ! Pour l'achat d'un cadre photo numérique Sony et d'un bouquet de fleurs sur Interflora.fr, Sony vous rembourse 40 ** * Les jours en fleurs de Sony ** Voir modalités de l'offre au dos ou sur www.sony.fr/promotions Offre Fête des mères Sony Modalités de l'offre Pour l'achat d'un cadre photo numérique Sony (1) et d'un bouquet de fleurs sur www.interflora.fr (2) entre le 15 mai et le 25 juin 2009 inclus, en France métropolitaine...

PN-ZK10 Operation-Manual FR
PN-ZK10 Operation-Manual FR
11/03/2012 - www.sharp.fr
Spécifications principales Modèle Dimensions Poids PN-ZK10 Voir figure ci-dessous. Environ 23 kg (deux supports de fixation et les boulons) SHARP se réserve le droit d'apporter des modifications à la présentation et aux caractéristiques des appareils à fin d'amélioration. Les valeurs indiquées dans ce document sont les valeurs nominales des appareils de série mais de légères différences peuvent être constatées d'un appareil à l'autre. Mode d'emploi Support de fixation Modèles concernés...

Communiqué de presse - Philips
Communiqué de presse - Philips
07/04/2017 - www.philips.fr
Communiqué de presse 13 avril 2016 Philips présente la première solution exclusivement à résonance magnétique (RM) pour la planification du traitement du cancer de la prostate aux Etats-Unis ð· La simulation exclusivement RM sur l Ingenia MR-RT obtient l agrément de la FDA pour la planification du traitement du cancer de la prostate, premier type de cancer chez les hommes aux Etats-Unis ð· Cette solution démontre l engagement de Philips à améliorer la prise en charge des patients...

My Passport® Essential™ SE Portable Hard Drives - Product Overview
My Passport® Essential™ SE Portable Hard Drives - Product Overview
11/04/2012 - www.wdc.com
My Passport Essential SE TM ® Disques durs portables Nouvelle génération de stockage mobile grande capacité LES D IS ES DURS EX QU US V ENDUS AU Double-compatibilité USB 3.0 et USB 2.0 Logiciel de sauvegarde visuelle WD SmartWareTM Chiffrement matériel, protection par mot de passe Le disque dur externe numéro 1 des ventes mondiales offre la connectivité avec l'USB 2.0 et l'USB 3.0 pour la compatibilité d'aujourd'hui et la rapidité de demain. Une capacité maximum pour un disque...

MacBook Pro (Early 2008) Manuale utente - Support - Apple
MacBook Pro (Early 2008) Manuale utente - Support - Apple
27/11/2014 - manuals.info.apple.com
Complimenti, hai raggiunto una sintonia perfetta con il tuo MacBook Pro. Videocamera iSight integrata Puoi fare videoconferenze con tre amici di qualunque parte del mondo in contemporanea. www.apple.com/it/macbookpro Aiuto Mac isight Finder Sfoglia il contenuto del tuo computer utilizzando Cover Flow. www.apple.com/it/macosx Aiuto Mac finder Time Machine Effettua automaticamente il backup dei tuoi documenti su un'unità esterna. www.apple.com/it/macosx Aiuto Mac time machine iMovie Raccogli...

Download - Samsung
Download - Samsung
21/11/2014 - www.samsung.com
s a msung profile 2009 5 16 32 48 59 63 108 ste p fo rward co l l e cti ve m o m e ntu m p assi o nate m i nds the co nsi de re d p ath fi nanci al hi g hl i g hts co m p any p ro fi l e s g lo b al ne two rk Today we face significant challenges. A volatile global economy, shifts in leadership, faltering markets &all lend uncertainty as we consider the future. Amidst the tumult, there is reason to celebrate. T oge t her , we wo r k, p lay, and share in ways unimaginable 20 year s ago. 1 Id...