A copy of this work was available on the public web and has been preserved in the Wayback Machine. The capture dates from 2013; you can also visit the original URL.
The file type is application/pdf.
Noninterference for a Practical DIFC-Based Operating System
2009
2009 30th IEEE Symposium on Security and Privacy
Preserved Fulltext
The Flume system is an implementation of decentralized information flow control (DIFC) at the operating system level. Prior work has shown Flume can be implemented as a practical extension to the Linux operating system, allowing real Web applications to achieve useful security guarantees. However, the question remains if the Flume system is actually secure. This paper compares Flume with other recent DIFC systems like Asbestos, arguing that the latter is inherently susceptible to certain
doi:10.1109/sp.2009.23
dblp:conf/sp/KrohnT09
fatcat:fzhg7p7hqjf7hifqh4xxz3fmsa