Method and system for extending SELinux policy models and...

Details Method and system for extending SELinux policy models and... Method and system for extending SELinux policy models and...

2007-12-14

2011-11-01

Revak, Christopher (Department: 2431)

Information security

Policy

C713S001000

Reexamination Certificate

active

08051459

ABSTRACT:
A Security Enhanced Linux (SELinux) system implementing extended policy models and method for their enforcement, is provided. Extended attributes are defined to specify extended policies. The SELinux policy model is extended to include the extended policies. The extended policies are enforced in addition to SELinux Type Enforcement. In one implementation, defining extended attributes involves defining TC-related attributes to specify TC-related policies. Further, extending the SELinux policy model includes extending the SELinux policy model to include the TC-related policies, in addition to SELinux Type Enforcement. Furthermore, enforcing the extended policies includes enforcing the TC-related policies in addition to SELinux Type Enforcement.

REFERENCES:
patent: 7546629 (2009-06-01), Albert et al.
patent: 2006/0015723 (2006-01-01), Lui et al.
patent: 2006/0015860 (2006-01-01), Liu et al.
patent: 2007/0198853 (2007-08-01), Rees
patent: 2008/0060051 (2008-03-01), Lim
patent: 2008/0141335 (2008-06-01), Thomas
patent: 2008/0141338 (2008-06-01), Kim et al.
patent: 2009/0125974 (2009-05-01), Zhang et al.
patent: 2009/0158385 (2009-06-01), Kim et al.
patent: 2009/0271844 (2009-10-01), Zhang et al.
patent: 2010/0162240 (2010-06-01), Zhang et al.
patent: 2010/0287598 (2010-11-01), Korkishko et al.
Horie et al, “Adaptive Access Policy for the Linux Kernel”, 2005, Proceedings of the 2005 Symposium on Applications and the Internet (SAINT'05), IEEE Computer Society, p. 1-7.
Athey et al, “Towards Intuitive Tools for Managing SELinux: Hiding the Details but Retaining the Power”, Mar. 12, 2007, Tresys Technology, p. 1-13.
Teo et al, “Towards the Specification of Access Control Policies on Multiple Operating Systems”, Jun. 2004, Proceedings of the 2004 IEEEE Workshop on the Information Assurance and Security, p. 210-217.
Hicks et al, “A Logical Specification and Analysis for SELinux MLS Policy”, Jun. 2007, SACMAT '07, p. 91-100.
Zanin et al, “Towards a Formal Model for Security Policies Specification and Validation in the SELinux System”, Jun. 2004, SACMAT '04, p. 136-145.
Trusted Computing Group timeline, Trusted Computing Group, pp. 1-3, Apr. 2009, US.
SELinux: Information Assurance Through Partnership, National Security Agency, pp. 1-9, Mar. 14, 2007, US.
TPM Main Parts 1-3, Specification Version 1.2, Level 2 Revision 103, Jul. 9, 2007, pp. 1-170 (Part 1), 1-186(Part 2), 1-318 (part 3), US.

Affiliated with

Also associated with

Rating

Method and system for extending SELinux policy models and... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and system for extending SELinux policy models and..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and system for extending SELinux policy models and... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4280961