User-Driven Access Control: Rethinking Permission ... - CiteSeerX

Extrait du fichier (au format texte) :

User-Driven Access Control:
Rethinking Permission Granting in Modern Operating Systems
Franziska Roesner, Tadayoshi Kohno
{franzi, yoshi}@cs.washington.edu
University of Washington

Alexander Moshchuk, Bryan Parno, Helen J. Wang
{alexmos, parno, helenw}@microsoft.com
Microsoft Research, Redmond

Crispin Cowan crispin@microsoft.com
Microsoft
Abstract

tionality and security for access to the user s data and resources. From a functionality standpoint, isolation inhibits the client-side manipulation of user data across arbitrary applications. For example, the isolation of web sites makes it difficult to share photos between two online providers
(e.g., Picasa and Flickr) without manually downloading and re-uploading them. (While two such applications can prenegotiate data exchanges through IPC channels or other APIs,
requiring every pair of applications used by a user to prenegotiate is inefficient or impossible.) From a security standpoint, existing access control mechanisms tend to be coarsegrained, abrasive, or inadequate. For instance, they require users to make out-of-context, uninformed decisions at install time via manifests [3, 6], or they unintelligently prompt users to determine their intent [5, 20].
Thus, a pressing open problem in these systems is how to allow users to grant applications access to user-owned resources spanning different isolation boundaries, defined as privacy-and cost-sensitive devices and sensors (such as the camera, GPS, or SMS capabilities), system services and settings (such as the contact list or clipboard), and user content stored with various applications (such as photos or documents). To address this problem, we propose user-driven access control, whereby the system captures user intent via authentic user actions in the context of applications.
In particular, we introduce access control gadgets (ACGs)
as an operating system technique to capture user intent. Each user-owned resource exposes UI elements called ACGs for applications to embed. The user s authentic UI interactions with an ACG grant the embedding application permission to access the corresponding resource. Our design ensures the display integrity of ACGs, resists tampering by malicious applications, and allows the system to translate authentic user input on the ACGs into permissions.
The ACG mechanism enables a permission granting system that minimizes unintended access by letting users grant permissions at the time of use (unlike the manifest model)
and minimizes the burden on users by implicitly extracting a

Modern client platforms, such as iOS, Android, Windows
Phone, Windows 8, and web browsers, run each application in an isolated environment with limited privileges. A pressing open problem in such systems is how to allow users to grant applications access to user-owned resources, e.g., to privacyand cost-sensitive devices like the camera or to user data residing in other applications. A key challenge is to enable such access in a way that is non-disruptive to users while still maintaining least-privilege restrictions on applications.
In this paper, we take the approach of user-driven access control, whereby permission granting is built into existing

Les promotions



Architectures reconfigurables et traitement de proble`mes ... - Microsoft
Architectures reconfigurables et traitement de proble`mes ... - Microsoft
16/11/2016 - www.microsoft.com
RECHERCHE Architectures reconfigurables et traitement de proble`mes NP-difficiles : un nouveau domaine d application Youssef Hamadi    David Merceron  '  ' LIRMM, UMR 5506 CNRS/Universite´ Montpellier II 161, Rue Ada, 34392 Montpellier Cedex 5 hamadi@lirmm.fr ''' EURIWARE, 12-14 rue du fort de St-Cyr 78067 St Quentin-en-Yvelines Cedex damercer@euriware.fr RE´SUME´. L algorithme GSAT est un algorithme de recherche locale. Cette me´thode recherche la premie`re instanciation...

D6. 4: Final evaluation of CLASSiC TownInfo and ... - Microsoft
D6. 4: Final evaluation of CLASSiC TownInfo and ... - Microsoft
23/11/2017 - www.microsoft.com
See discussions, stats, and author profiles for this publication at: https://www.researchgate.net/publication/228835240 D6. 4: Final evaluation of CLASSiC TownInfo and Appointment Scheduling systems Article · May 2011 CITATIONS READS 15 56 11 authors, including: Helen Hastie Filip Jurcicek Heriot-Watt University Charles University in Prague 105 PUBLICATIONS 858 CITATIONS 55 PUBLICATIONS 439 CITATIONS SEE PROFILE SEE PROFILE Oliver Joseph Lemon Steve Young Heriot-Watt University University of Cambridge 323 PUBLICATIONS 3,678 CITATIONS 310 PUBLICATIONS 14,308 CITATIONS SEE PROFILE SEE PROFILE Some of the authors of this publication are also working on these related projects: MaDrIgAL: Multi-Dimensional Interaction management and Adaptive Learning View project ...

User-Driven Access Control: Rethinking Permission ... - CiteSeerX
User-Driven Access Control: Rethinking Permission ... - CiteSeerX
23/08/2018 - www.microsoft.com
User-Driven Access Control: Rethinking Permission Granting in Modern Operating Systems Franziska Roesner, Tadayoshi Kohno {franzi, yoshi}@cs.washington.edu University of Washington Alexander Moshchuk, Bryan Parno, Helen J. Wang {alexmos, parno, helenw}@microsoft.com Microsoft Research, Redmond Crispin Cowan crispin@microsoft.com Microsoft Abstract tionality and security for access to the user s data and resources. From a functionality standpoint, isolation inhibits the client-side manipulation...

A Large-Scale Study of the Evolution of Web Pages - Microsoft
A Large-Scale Study of the Evolution of Web Pages - Microsoft
23/08/2018 - www.microsoft.com
A Large-Scale Study of the Evolution of Web Pages Dennis Fetterly Hewlett Packard Labs 1501 Page Mill Road Palo Alto, CA 94304 dennis.fetterly@hp.com Mark Manasse Marc Najork Microsoft Research Microsoft Research 1065 La Avenida 1065 La Avenida Mountain View, CA 94043 Mountain View, CA 94043 manasse@microsoft.com najork@microsoft.com Janet Wiener Hewlett Packard Labs 1501 Page Mill Road Palo Alto, CA 94304 janet.wiener@hp.com ABSTRACT 1. INTRODUCTION How fast does the web change? Does most...

C dric FOURNET LE JOIN-CALCUL : UN CALCUL POUR ... - Microsoft
C dric FOURNET LE JOIN-CALCUL : UN CALCUL POUR ... - Microsoft
11/04/2018 - www.microsoft.com
TH SE pr sent e L' COLE POLYTECHNIQUE pour obtenir le titre de DOCTEUR DE L' COLE POLYTECHNIQUE sp cialit : INFORMATIQUE par C dric FOURNET Sujet de la th se : LE JOIN-CALCUL : UN CALCUL POUR LA PROGRAMMATION R PARTIE ET MOBILE The Join-Calculus: a Calculus for Distributed Mobile Programming Soutenue le 23 Novembre 1998 devant le jury compos de : MM. Robin Milner Roberto Amadio G rard Boudol Jean-Jacques L vy G rard Berry Luca Cardelli Georges Gonthier Pr sident Rapporteurs Directeur de th...

MatrixExplorer: Un système pour l'analyse exploratoire de ... - Microsoft
MatrixExplorer: Un système pour l'analyse exploratoire de ... - Microsoft
22/05/2017 - www.microsoft.com
MatrixExplorer: Un système pour l analyse exploratoire de réseaux sociaux Nathalie Henry Jean-Daniel Fekete INRIA Futurs/LRI/University of Sydney Bât 490, Université Paris-Sud 91405 Orsay Cedex Nathalie.Henry@lri.fr INRIA Futurs/LRI Bât 490, Université Paris-Sud 91405 Orsay Cedex Jean-Daniel.Fekete@inria.fr RESUME ABSTRACT Dans cet article, nous présentons le système MatrixExplorer destiné à explorer des réseaux sociaux. Il a été conçu pour des chercheurs en sciences sociales...

Microsoft K State Whitepaper 2021 08 17
Microsoft K State Whitepaper 2021 08 17
23/09/2024 - www.microsoft.com
Cloud enclave for academic research Streamlining security and compliance at your institution August 2021 Contents Introduction........................................................................................................ 3 1. Assess where you are today........................................................................ 4 Work directly with researchers to identify challenges............................................................................... 4 Identify existing compliance...

1 Introduction - Microsoft
1 Introduction - Microsoft
11/04/2018 - www.microsoft.com
One-Way Accumulators: A Decentralized Alternative to Digital Signatures (Extended Abstract) Josh Benaloh Clarkson University Michael de Mare Giordano Automation Abstract This paper describes a simple candidate one-way hash function which satis es a quasi-commutative property that allows it to be used as an accumulator. This property allows protocols to be developed in which the need for a trusted central authority can be eliminated. Space-e cient distributed protocols are given for document time...
 
 

Bon de remise postale de Samsung
Bon de remise postale de Samsung
13/02/2012 - www.samsung.com
Bon de remise postale de Samsung Achetez ou louez une imprimante SCX-6555N ou CLX-8380ND de Samsung et recevez la remise postale ci-dessous. Période de validité : Date limite d'oblitération : Modèle Imprimante multifonction SCX-6555N Imprimante multifonction CLX-8380ND Code de produit SCX-6555N/XAA CLX-8380ND/XAA du 1er avril au 30 september 2009 31 octobre 2009 Offre Achetez ou louez une imprimante SCX-6555N de Samsung et recevez une remise. Achetez ou louez une imprimante CLX-8380ND de Samsung...

FM Stereo FM-AM Receiver
FM Stereo FM-AM Receiver
06/07/2018 - www.sony.fr
3-864-512-61(1) FM Stereo FM-AM Receiver Operating Instructions GB Mode d emploi F Gebruiksaanwijzing NL Bruksanvisning S STR-DA50ES øé 1998 by Sony Corporation WARNING Precautions To prevent fire or shock hazard, do not expose the unit to rain or moisture. On safety To avoid electrical shock, do not open the cabinet. Refer servicing to qualified personnel only. Do not install the appliance in a confined space, such as a bookcase or built-in cabinet. Should any solid object or...

Brio 505 Datasheet
Brio 505 Datasheet
25/09/2024 - www.logitech.com
DATASHEET BRIO 505 Give employees an easy-to-use webcam that helps them feel authentic during meetings. From the leader in video conferencing hardware, Brio 505 offers crisp video, light and sound optimization, auto-framing1,2, and more, along with easy IT management. Confidently deploy flawless video meetings with Brio 505, a foolproof plug-and-play HD webcam packed with features that help employees look and sound natural during meetings. Advanced light correction, auto-framing1,2, noise-reducing...

LES JALONS DE HP DANS LE DOMAINE DE  LA CITOYENNETÉ ...
LES JALONS DE HP DANS LE DOMAINE DE LA CITOYENNETÉ ...
22/03/2012 - www.hp.com
LES JALONS DE HP DANS LE DOMAINE DE LA CITOYENNETÉ ENVIRONNEMENTALE 2012 Lloyd Bryant, vice-président et directeur général, Groupe impression et systèmes personnels et programmes environnementaux pour HP Canada, et Frances Edmonds, Directrice des programmes environnementaux pour HP Canada, ont tous les deux été reconnus pour le prix Clean16 de Delta Management Group pour le progrès réalisé en matière de capitalisme sain du secteur informatique pour 2013. Ils ont été honorés pour avoir...

FRITEUSES ELECTRIQUES ACTIVE - 23 L
FRITEUSES ELECTRIQUES ACTIVE - 23 L
16/04/2012 - tools.professional.electrolux.com
COMPOSITION DE LA GAMME N 900: une gamme de plus de 150 modèles pour les cuisines professionnelles, conçue pour garantir des performances très élevées en terme de fiabilité, d'économie d'énergie, d'ergonomie et de respect des normes de sécurité pour les opérateurs. Ces concepts se retrouvent dans toute la modularité de la gamme permettant ainsi la création d'une multitude de configurations différentes, monobloc linéaire, en système «pont» ou en suspendu. La gamme N 900 démontre...

NSwitch SegaMegaDriveControlPad DeclarationOfConformity
NSwitch SegaMegaDriveControlPad DeclarationOfConformity
13/05/2025 - www.nintendo.com
EU Declaration of Conformity (DoC) 1. Product name SEGA Mega Drive Control Pad HAC-045 2. Model number 5. We Nintendo Co., Ltd. Kyoto 601-8501, Japan declare that the DoC is issued under our sole responsibility. 6a. The object(s) of the declaration is/are in conformity with the relevant Union harmonization legislation(s), and the following harmonized standards along with other technical specifications have been applied: 7. (Essential Requirements, Reference standards and Normative reference of...