Research on User Permission Isolation for Multi-Users Service-Oriented Program

• 作者: Jiang Wei Li Yu Liang Peng Lin Li Shupo Bu Yingxu Lai Zhan Jing
• 来源期刊: 通讯、网络与系统学国际期刊(英文)
• 学科: 医学
• 关键词: Least PRIVILEGE VIRTUALIZATION ISOLATION Privileged USER Domain System Service
• 年，卷（期）: 2012,（2）
• 页码范围: 105-110
• 页数: 6页
• 分类号: R73

摘要

For the super user privilege control problem in system services, a user permission isolation method is proposed. Based on virtualization technology, the permission limited environments are constructed for different users. According to privilege sets, the users, mapping relations are built among users, isolated domains and program modules. Besides, we give an algorithm for division of program permissions based on Concept Lattices. And the security strategies are designed for different isolated domains. Finally, we propose the implications of least privilege, and prove that the method eliminates the potential privileged users in system services.