|
Object Capabilities for Security
Google Tech Talks
November, 30 2007
ABSTRACT
Existing systems often do a poor job of meeting the principle of least privilege. I will discuss how object capability systems and language-based methods can help address this shortcoming. In language-based object capability systems, an object reference is treated as a capability; unforgeability of references ensures unforgeability of capabilities; and all privileges are expressed as capabilities in this way. This makes it possible to decompose the system into distrusting "privilege-separated" components, providing each component with the least privilege it needs to do its job; to reason about the privileges and powers available to various program elements, often in a local (modular) way; and to avoid common pitfalls, such as confused deputy and TOCTTOU vulnerabilities.
I will attempt to introduce the audience to some work in this area that is perhaps not so widely known, and I will describe some work in progress to construct a subset of Java, called Joe-E, that is intended to enable capability-style programming using a programming syntax that is familiar to Java programmers.
Speaker: David Wagner
David Wagner is an Associate Professor in the Computer Science Division at the University of California at Berkeley with extensive experience in computer security and cryptography. He and his Berkeley colleagues are known for discovering a wide variety of security vulnerabilities in various cellphone standards, 802.11 wireless networks, and other widely deployed systems, and he has published two books and over 90 peer-reviewed scientific papers. David is a founding member of the ACCURATE center on electronic voting. He is active in the areas of systems security, cryptography, and electronic voting.
Channel: People & Blogs
Uploaded: December 4, 2007 at 10:13 am
Author: googletechtalks
Length: 59:49
Rating: 4.70
Views: 4853
Tags: education engedu google googletechtalks talk talks techtalk techtalks
Video Comments
|
mettalika26 (August 30, 2008 at 8:35 pm)
hkyuuuu
cristiandeidaho (August 9, 2008 at 8:46 pm)
Uhm gosh uhm people need to learn how to uh give a presentation, uh but, uhm, so uhm, uh in particular, you should review your presentation before you give it, uhm yes uhm. |
|
Subscribe to
"The Network Marketing Success
Ezine"
The network marketing ezine for distributors, leaders and
trainers working hard to build their business with
articles, blog, tips and tricks from people who have been
there done that.
Bonus: 8 Quality Audio Reports w/ Resell
Rights
|
Amazing Advertising
Tips
|
Blockbuster Cash
Secrets
|
|
Breakthrough Sales
Solutions
|
Clever Profit
Generating
Insights
|
|
Covert Product Selling
Principles
|
Customer Tested Buying
Triggers
|
|
Explosive Influence
Tactics
|
Extreme Persuasion
Strategies
|
We guarantee
your privacy! We will never share your email address,
period.
Simple opt out instructions
included with every communication.
If you don't like what we're
sharing with you, you can banish us...
forever!
Add your banner to this banner rotation. Check out the ad specials! Click here!
|
