Some variants of the take-grant protection model

DOI10.1016/0020-0190(84)90095-4MaRDI QIDQ801669zbMATH OpenOpenAlexFDO

Authors Joachim Biskup

Publication date 1984

Published in Information Processing Letters (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1016/0020-0190(84)90095-4

zbMATH Keywords

create- ruleshared resourcestake-grant modeltake-grant protection model

Mathematics Subject Classification ID

Theory of operating systems (68N25) Graph theory (including graph drawing) in computer science (68R10)

Review text

The take-grant protection model has been introduced several years ago in order to describe and to study access control facilities of shared resources in computer systems. A state of the system is modelled by subjects and objects where subjects can possess rights to perform operations, resp. to transport rights, with respect to other subjects or objects. Given an initial state and a set of transformation rules the basic protection problem is to decide whether a subject x can obtain a specific right r with respect to subject/object y. Here the create-rule that produces new subjects or objects is the most crucial rule. This paper studies several variants of the known take-grant-protection model in order to clarify the role of creates for transporting rights. First it is shown that some restricted versions of the create-rule do not have the full power of the original rule such that some undesirable effects can be avoided. Then reflexive rights and a new selfgrant-rule that can simulate the role of the create-rule in transporting right are investigated. It turned out that the results of this paper are related to the send-receive protection model proposed in a series of papers by Naftaly H. Minsky.

Recommendations

• Designing and implementation of a new security model
• Undecidability of safety for the schematic protection model with cyclic creates
• Creation and reflexive rights in grammatical protection systems
• Closure of basic role DP-model
• Security analysis of systems with simple trajectories functioning within framework of the base role DP-model

Cites work

• A Linear Time Algorithm for Deciding Subject Security
• Formal Models of Capability-Based Protection Systems
• scientific article; zbMATH DE number 3915608 (Why is no real title available?)
• Theft and conspiracy in the Take-Grant protection model

Cited in

(3)

• Creation and reflexive rights in grammatical protection systems
• Designing and implementation of a new security model
• Information and Communications Security

This page was built for publication: Some variants of the take-grant protection model

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q801669)