Principle of Least Privilege (PLP): Implementation

This paper presents the design and implementation of a prototype tool for the extraction of the so-called Task Execution Model directly from the source code of a software system. The Task Execution Model is an essential building block for the analysis of the least privilege violations in a software architecture (presented in previous work). However, the trustworthiness of the analysis results relies on the correspondence between the analyzed model and the implementation of the system. Therefore, the tool presented here is a key ingredient to provide assurance that the analysis results are significant for the system at hand.

Download Full-text

Determination and Enforcement of Least-Privilege Architecture in Android

2017 IEEE International Conference on Software Architecture (ICSA) ◽

10.1109/icsa.2017.18 ◽

2017 ◽

Cited By ~ 6

Author(s):

Mahmoud Hammad ◽

Hamid Bagheri ◽

Sam Malek

Keyword(s):

Least Privilege

Download Full-text

Toward an Integrative Model of Application-Software Security

Practicing Software Engineering in the 21st Century ◽

10.4018/978-1-93177-750-6.ch011 ◽

2003 ◽

pp. 157-163

Author(s):

Vijay V. Raghavan

Keyword(s):

Software Security ◽

Social Engineering ◽

Systems Development ◽

System Level ◽

Integrative Model ◽

Software Systems ◽

Execution Monitoring ◽

Systems Security ◽

Least Privilege ◽

Implementation Stages

Populist approaches to studying information systems security include architectural, infrastructure-related and system-level security. This study focuses on software security implemented and monitored during systems development and implementation stages. Moving away from the past checklist methods of studying software security, this study provides a model that could be used in categorizing checklists into meaningful clusters. Many constructs, such as principle of least privilege, execution monitoring, social engineering and formalism and pragmatism in security implementations, are identified in the model. The identification of useful constructs to study can form the basis of evaluating security in software systems as well as provide guidelines of implementing security in new systems developed.

Download Full-text