CSC News

June 22, 2016

ARO Supports Enck’s Research on Enforcement of Access Control

Dr. William Enck, assistant professor of computer science at NC State University, has been awarded $411,895 by the US Army – Army Research Office to support his research proposal entitled “Correct Enforcement of Access Control Policy in Modern Operating Systems; Research Area:  5.3 Information and Software Assurance.”
The award will run from May 9, 2016 through May 8, 2019. 
Abstract – Consumer operating systems are changing. Modern platforms such as Android, iOS, and Windows 8 provide new abstractions for specifying and enforcing access control policy on third-party applications run by end users. The new abstractions add complexity to both policy specification and enforcement. In this proposal, we focus specifically on the correctness of enforcement in these modern platforms. The proposed work seeks to extract a formal semantics of access control policy by mining existing code bases. We then analyze the extracted model for correct enforcement of security goals. The models will also be compared across platform variations, as well as across different platforms. In doing so, we seek to harden existing platforms and establish stronger trustworthiness in a security-critical layer of platforms relied upon by consumers, enterprises, and governments.
For more information on Dr. Enck, click here.

Return To News Homepage