Output details

A decade of OS access-control extensibility

<19>This peer-reviewed article describes original research following from Watson's 2003 USENIX ATC article proposing a new model for extensible OS access control. The first four pages revisit the 2003 paper; the remaining eight pages present new results in security extensibility grounded from adapting and and transitioning my work to commercial products. The described research on product-security adaptation became the intellectual and implementation foundations for access-control and sandboxing in the open-source FreeBSD OS, and proprietary Apple OS X, Apple iOS (iPhone/iPad), Juniper Junos (router OS), and nCircle IP systems; and other products not described in the article including Intel/McAfee firewalls.