|
|
| (One intermediate revision by one other user not shown) |
| Line 1: |
Line 1: |
| The '''HRU''' security model (Harrison, Ruzzo, [[Jeffrey Ullman|Ullman]] model) is an [[operating system]] level [[computer security model]] which deals with the [[data integrity|integrity]] of [[access control|access rights]] in the system. It is an extension of the [[Graham-Denning model]], based around the idea of a [[finite set]] of [[algorithm|procedures]] being available to edit the access rights of a subject <math>s</math> on an object <math>o</math>. It is named after its three authors, Michael A. Harrison, Walter L. Ruzzo and Jeffrey D. Ullman.<ref name=HRU-paper/>
| | Nice to meet you, my title is Refugia. For years he's been living in [http://herpesgoddess.tumblr.com/ North Dakota] and his family loves it. One of the very best [http://blogzaa.com/blogs/post/9199 at home std test] things in [http://richlinked.com/index.php?do=/profile-32092/info/ over the counter std test] globe for me is to do [http://samedaystdtesting.com/testing-clinics/florida-fl/hialeah-std-testing/2750-west-68th-street-suite-225-226-33016 aerobics] and I've been doing it for quite a while. std testing at home He utilized to be unemployed but now he is a computer operator but his marketing never comes.<br><br>My web site; [http://www.eyelevelfederalway.com/xe/index.php?mid=Promotions&page=1&document_srl=571267 www.eyelevelfederalway.com] |
| | |
| Along with presenting the model, Harrison, Ruzzo and Ullman also discussed the possibilities and limitations of proving the safety of systems using an [[algorithm]].<ref name=HRU-paper/>
| |
| | |
| == Description of the model ==
| |
| The HRU model defines a ''protection system'' consisting of a set of generic rights ''R'' and a set of commands ''C''. An instantaneous description of the system is called a ''configuration'' and is defined as a [[tuple]] <math>(S,O,P)</math> of current subjects <math>S</math>, current objects <math>O</math> and an access matrix <math>P</math>. Since the subjects are required to be part of the objects, the access matrix contains one row for each subject and one column for each subject and object. An entry for subject <math>s</math> and object <math>o</math> is a subset of the generic rights <math>R</math>.
| |
| | |
| The commands are composed of primitive operations and can additionally have a list of pre-conditions that require certain rights to be present for a pair <math>(s,o)</math> of subjects and objects.
| |
| | |
| The primitive requests can modify the access matrix by adding or removing access rights for a pair of subjects and objects and by adding or removing subjects or objects. Creation of a subject or object requires the subject or object not to exist in the current configuration, while deletion of a subject or object requires it to have existed prior to deletion. In a complex command, a sequence of operations is executed only as a whole. A failing operation in a sequence makes the whole sequence fail, a form of [[database transaction]].
| |
| | |
| == Discussion of safety ==
| |
| Harrison, Ruzzo and Ullman<ref name=HRU-paper/> discussed whether there is an algorithm that takes an arbitrary initial configuration and answers the following question: is there an arbitrary sequence of commands that adds a generic right into a cell of the access matrix where it has not been in the initial configuration?
| |
| | |
| They showed that there is no such algorithm, thus the problem is [[undecidable problem|undecidable]] in the general case. They also showed a limitation of the model to commands with only one primitive operation to render the problem decidable.
| |
| | |
| == See also ==
| |
| * [[EROS (microkernel)|EROS - Extremely Reliable Operating System]]
| |
| | |
| == References ==
| |
| {{reflist|refs=
| |
| <ref name=HRU-paper>{{cite journal | first1 = Michael A. | last1 = Harrison | first2 = Walter L. | last2 = Ruzzo | first3 = Jeffrey D. | last3 = Ullman | id = {{citeseerx|10.1.1.106.7226}} | title = Protection in Operating Systems | journal = Communications of the ACM | volume = 19 | issue = 8 | pages = 461–471 | month = August | year = 1976 }}</ref> | |
| }}
| |
| | |
| [[Category:Capability systems]]
| |
| [[Category:Computer security models]]
| |
Nice to meet you, my title is Refugia. For years he's been living in North Dakota and his family loves it. One of the very best at home std test things in over the counter std test globe for me is to do aerobics and I've been doing it for quite a while. std testing at home He utilized to be unemployed but now he is a computer operator but his marketing never comes.
My web site; www.eyelevelfederalway.com