User-Driven Access Control: Rethinking Permission ... - CiteSeerX

Extrait du fichier (au format texte) :

User-Driven Access Control:
Rethinking Permission Granting in Modern Operating Systems
Franziska Roesner, Tadayoshi Kohno
{franzi, yoshi}@cs.washington.edu
University of Washington

Alexander Moshchuk, Bryan Parno, Helen J. Wang
{alexmos, parno, helenw}@microsoft.com
Microsoft Research, Redmond

Crispin Cowan crispin@microsoft.com
Microsoft
Abstract

tionality and security for access to the user s data and resources. From a functionality standpoint, isolation inhibits the client-side manipulation of user data across arbitrary applications. For example, the isolation of web sites makes it difficult to share photos between two online providers
(e.g., Picasa and Flickr) without manually downloading and re-uploading them. (While two such applications can prenegotiate data exchanges through IPC channels or other APIs,
requiring every pair of applications used by a user to prenegotiate is inefficient or impossible.) From a security standpoint, existing access control mechanisms tend to be coarsegrained, abrasive, or inadequate. For instance, they require users to make out-of-context, uninformed decisions at install time via manifests [3, 6], or they unintelligently prompt users to determine their intent [5, 20].
Thus, a pressing open problem in these systems is how to allow users to grant applications access to user-owned resources spanning different isolation boundaries, defined as privacy-and cost-sensitive devices and sensors (such as the camera, GPS, or SMS capabilities), system services and settings (such as the contact list or clipboard), and user content stored with various applications (such as photos or documents). To address this problem, we propose user-driven access control, whereby the system captures user intent via authentic user actions in the context of applications.
In particular, we introduce access control gadgets (ACGs)
as an operating system technique to capture user intent. Each user-owned resource exposes UI elements called ACGs for applications to embed. The user s authentic UI interactions with an ACG grant the embedding application permission to access the corresponding resource. Our design ensures the display integrity of ACGs, resists tampering by malicious applications, and allows the system to translate authentic user input on the ACGs into permissions.
The ACG mechanism enables a permission granting system that minimizes unintended access by letting users grant permissions at the time of use (unlike the manifest model)
and minimizes the burden on users by implicitly extracting a

Modern client platforms, such as iOS, Android, Windows
Phone, Windows 8, and web browsers, run each application in an isolated environment with limited privileges. A pressing open problem in such systems is how to allow users to grant applications access to user-owned resources, e.g., to privacyand cost-sensitive devices like the camera or to user data residing in other applications. A key challenge is to enable such access in a way that is non-disruptive to users while still maintaining least-privilege restrictions on applications.
In this paper, we take the approach of user-driven access control, whereby permission granting is built into existing

Les promotions



1 Introduction - Microsoft
1 Introduction - Microsoft
11/04/2018 - www.microsoft.com
One-Way Accumulators: A Decentralized Alternative to Digital Signatures (Extended Abstract) Josh Benaloh Clarkson University Michael de Mare Giordano Automation Abstract This paper describes a simple candidate one-way hash function which satis es a quasi-commutative property that allows it to be used as an accumulator. This property allows protocols to be developed in which the need for a trusted central authority can be eliminated. Space-e cient distributed protocols are given for document time...

User-Driven Access Control: Rethinking Permission ... - CiteSeerX
User-Driven Access Control: Rethinking Permission ... - CiteSeerX
23/08/2018 - www.microsoft.com
User-Driven Access Control: Rethinking Permission Granting in Modern Operating Systems Franziska Roesner, Tadayoshi Kohno {franzi, yoshi}@cs.washington.edu University of Washington Alexander Moshchuk, Bryan Parno, Helen J. Wang {alexmos, parno, helenw}@microsoft.com Microsoft Research, Redmond Crispin Cowan crispin@microsoft.com Microsoft Abstract tionality and security for access to the user s data and resources. From a functionality standpoint, isolation inhibits the client-side manipulation...

Microsoft K State Whitepaper 2021 08 17
Microsoft K State Whitepaper 2021 08 17
23/09/2024 - www.microsoft.com
Cloud enclave for academic research Streamlining security and compliance at your institution August 2021 Contents Introduction........................................................................................................ 3 1. Assess where you are today........................................................................ 4 Work directly with researchers to identify challenges............................................................................... 4 Identify existing compliance...

MSR Quantum applications - Microsoft
MSR Quantum applications - Microsoft
23/08/2018 - www.microsoft.com
( What Can We Do with a Quantum Computer? ( Matthias Troyer  Station Q, ETH Zurich | 1 Classical computers have come a long way Antikythera mechanism ENIAC astronomical positions (1946) (100 BC) Kelvin s harmonic analyzer prediction of tides (1878) Difference Engine (1822) Is there anything that we cannot solve on future supercomputers? Titan, ORNL (2013) Matthias Troyer | | 2 How long will Moore s law continue? Do we see signs of the end of Moore s law? Can we go below 7nm...

A Large-Scale Study of the Evolution of Web Pages - Microsoft
A Large-Scale Study of the Evolution of Web Pages - Microsoft
23/08/2018 - www.microsoft.com
A Large-Scale Study of the Evolution of Web Pages Dennis Fetterly Hewlett Packard Labs 1501 Page Mill Road Palo Alto, CA 94304 dennis.fetterly@hp.com Mark Manasse Marc Najork Microsoft Research Microsoft Research 1065 La Avenida 1065 La Avenida Mountain View, CA 94043 Mountain View, CA 94043 manasse@microsoft.com najork@microsoft.com Janet Wiener Hewlett Packard Labs 1501 Page Mill Road Palo Alto, CA 94304 janet.wiener@hp.com ABSTRACT 1. INTRODUCTION How fast does the web change? Does most...

Microsoft Modern Work Plan Comparison Education 11 2021
Microsoft Modern Work Plan Comparison Education 11 2021
14/09/2024 - www.microsoft.com
Add-on licenses Endpoint and app management Microsoft Product Terms Desktop client apps1 %? %? %? %? %? Office Mobile apps2 %? %? %? %? %? %? Install apps on up to 5 PCs/Mac + 5 tablets + 5 smartphones %?3 %? %? %?3 %? %? Office for the web %? %?

DictaNum : système de dialogue incrémental pour la dictée ... - Microsoft
DictaNum : système de dialogue incrémental pour la dictée ... - Microsoft
23/11/2017 - www.microsoft.com
See discussions, stats, and author profiles for this publication at: https://www.researchgate.net/publication/262881756 DictaNum : système de dialogue incrémental pour la dictée de numéros. Conference Paper · July 2014 CITATIONS READS 0 57 3 authors, including: Hatim Khouzaimi Romain Laroche Orange Labs / Laboratoire Informatique d'Avi & Microsoft Maluuba 12 PUBLICATIONS 42 CITATIONS 58 PUBLICATIONS 185 CITATIONS SEE PROFILE SEE PROFILE All content following this page was uploaded by Hatim Khouzaimi on 06 June 2014. The user has requested enhancement of the downloaded file. 21ème...

DSCOVR: Randomized Primal-Dual Block Coordinate ... - Microsoft
DSCOVR: Randomized Primal-Dual Block Coordinate ... - Microsoft
23/08/2018 - www.microsoft.com
DSCOVR: Randomized Primal-Dual Block Coordinate Algorithms for Asynchronous Distributed Optimization lin.xiao@microsoft.com Lin Xiao Microsoft Research AI Redmond, WA 98052, USA weiyu@cs.cmu.edu Adams Wei Yu Machine Learning Department, Carnegie Mellon University Pittsburgh, PA 15213, USA qihang-lin@uiowa.edu Qihang Lin Tippie College of Business, The University of Iowa Iowa City, IA 52245, USA wzchen@microsoft.com Weizhu Chen Microsoft AI and Research Redmond, WA 98052, USA October 13,...
 
 

Fiche produit Sony : 36/1175002557436.pdf
Fiche produit Sony : 36/1175002557436.pdf
16/02/2012 - www.sony.fr
Reprographes numériques Sony Solutions d'impression pour l'imagerie médicale Les soins aux patients ne demandent aucun compromis. En tant que radiologue spécialisé, vous exigez pour vos patients du matériel de la meilleure qualité, dont la fiabilité vous permet d'améliorer votre efficacité. Sony vous offre une gamme spécialisée de reprographes numériques, conçus pour répondre aux besoins du monde médical d'aujourd'hui. Un reprographe numérique Sony pour chaque besoin Dans l'environnement...

CONDITIONS PARTICULIERES DE L'ACTION SAMSUNG Veuillez lire ...
CONDITIONS PARTICULIERES DE L'ACTION SAMSUNG Veuillez lire ...
26/02/2018 - www.samsung.com
CONDITIONS PARTICULIERES DE L ACTION SAMSUNG Veuillez lire jusqu au bout avec attention les présentes Conditions Particulières de l Action et les Conditions Générales de l Action s y rapportant. Action : Recevez ce cashback en envoyant les éléments suivants par courrier postal, avant le 15 avril 2013 (cachet de la poste) à l adresse ci-dessous : 1. Le formulaire du site ou le coupon que vous avez reçu dans le magasin, dûment complété 2. Une copie de la facture ou du ticket de caisse...

Communiqué de presse (pdf) - Kyocera
Communiqué de presse (pdf) - Kyocera
30/01/2017 - www.kyocera.fr
Information presse Des sushis à la place de la traditionnelle dinde de Noël ? C est possible grâce à KYOCERA ! Kyoto, Japon/Neuss, Allemagne, 6 octobre 2016  Les sushis sont non seulement délicieux, mais ils augmenteraient également l espérance de vie. C est ce qu a révélé cette année une étude réalisée par le « National Center for Global Health and Medicine » de Tokyo. Ce plat constitue une alternative intéressante aux mets classiques des fêtes plus généreux, tels que...

Ad 090a Ad 170a   Notice D Utilisation V
Ad 090a Ad 170a Notice D Utilisation V
23/06/2024 - admin.astoria.tm.fr
AD 090 A Instructions d'utilisation AD 170 A couverture chauffante 1 place 150 x 100 cm 2 placeS 180 x 130 cm Performance, ergonomie, sécurité & Avec la couverture chauffante confort Astoria, reposez-vous sur les garanties d'une marque forte de plus de 10 ans d'expérience dans le domaine des tissus chauffants. Lire les instructions. Instructions importantes. A conserver pour usage ultérieur. Recommandations de sécurité %× Respecter impérativement les consignes de sécurité, d'utilisation...

HL-L5100DN - Brother
HL-L5100DN - Brother
29/05/2020 - www.brother.fr
HL-L5100DN Brother Imprimante Laser Monochrome Impression 1 General Technologie Classification Laser Processeur Recto-verso Vitesse d'impression (A4) Vitesse d'impression (A4) Recto-verso Resolution Mode silence Memoire Interface Interface Reseau filaire Affichage Temps de sortie de 1ere page Temps de prechauffage Langage d'impression Police residentielle (PCL) Police residentielle (PS) Code-barre residentiel (PCL) Pilote d'impression Laser Electro-photographique Classe produit 1 (IEC 60825-1:2007) Cortex-A9...

Hotte à usage domestique - Fiche Produit Selon le ... - Brandt
Hotte à usage domestique - Fiche Produit Selon le ... - Brandt
10/04/2020 - www.brandt.fr
Hotte a usage domestique - Fiche Produit Selon le reglement delegue (UE) N° 65/2014 Marque Reference commerciale Consommation d-Energie Annuelle (AEC hotte) BRANDT AD1049X 125 kWh/an Classe d-efficacite energetique du modele D Efficacite Fluidodynamique (FDE hotte) 17,9 Classe d-efficacite fluidodynamique Efficacite lumineuse du modele (LE hotte) Classe d-efficacite lumineuse du modele D 3 Lux/Watt Efficacite de filtration des graisses G 76 % Classe d-efficacite de filtration des graisses C Debit...