The State of the Art of Application Restrictions and Sandboxes: A Survey of ... (paper)

MrBrian · Aug 2, 2014

... Application-oriented Access Controls and their Shortfalls (2012)

Abstract

Under most widely-used security mechanisms the programs users run possess more authority than is strictly necessary, with each process typically capable of utilising all of the user's privileges. Consequently such security mechanisms often fail to protect against contemporary threats, such as previously unknown (‘zero-day’) malware and software vulnerabilities, as processes can misuse a user's privileges to behave maliciously. Application restrictions and sandboxes can mitigate threats that traditional approaches to access control fail to prevent by limiting the authority granted to each process. This developing field has become an active area of research, and a variety of solutions have been proposed. However, despite the seriousness of the problem and the security advantages these schemes provide, practical obstacles have restricted their adoption.

This paper describes the motivation for application restrictions and sandboxes, presenting an in-depth review of the literature covering existing systems. This is the most comprehensive review of the field to date. The paper outlines the broad categories of existing application-oriented access control schemes, such as isolation and rule-based schemes, and discusses their limitations. Adoption of these schemes has arguably been impeded by workflow, policy complexity, and usability issues. The paper concludes with a discussion on areas for future work, and points a way forward within this developing field of research with recommendations for usability and abstraction to be considered to a further extent when designing application-oriented access controls.
Click to expand...

My bolding.

The full paper is free at Google Scholar.

Minimalist · Aug 2, 2014

Can you please post a link?

wat0114 · Aug 2, 2014

I found a pdf download here:

-http://researchrepository.murdoch.edu.au/12118/

Minimalist · Aug 2, 2014

Thank you wat0114

deBoetie · Aug 5, 2014

Thank you, very helpful.

MrBrian · Aug 5, 2014

deBoetie said: ↑

Thank you, very helpful.
Click to expand...

You're welcome .

Log in or Sign up

The State of the Art of Application Restrictions and Sandboxes: A Survey of ... (paper)

MrBrian Registered Member

Minimalist Registered Member

wat0114 Registered Member

Minimalist Registered Member

deBoetie Registered Member

MrBrian Registered Member

Log in or Sign up

The State of the Art of Application Restrictions and Sandboxes: A Survey of ... (paper)

MrBrian Registered Member

Minimalist Registered Member

wat0114 Registered Member

Minimalist Registered Member

deBoetie Registered Member

MrBrian Registered Member

Useful Searches