The UNIX time-sharing system

Ritchie, Dennis M.; Thompson, Ken

doi:10.1145/361011.361061

Cited by 776 publications

(178 citation statements)

References 4 publications

Supporting

Mentioning

167

Contrasting

Unclassified

Order By: Relevance

“…This paradigm had roots in the research UNIX community and its USENET, with some philosophical roots later added with the "Free Software" principles of Stallman. The mid-1960s MULTICS (Daley & Dennis, 1968;Organick, 1972) project, part of the U.S. Defense Advanced Research Projects Agency (DARPA)-supported Project MAC (Fano & David, 1965) at MIT, gave rise to the original UNIX system (Ritchie & Thompson, 1974, 1978Thompson, 1978) (the name UNIX is in fact a pun on MULTICS) as a reaction to MULTICS system complexity. Unfortunately, in rejecting much of MULTICS, the UNIX system was not able to avail itself of the extensive effort devoted to developing protection models and security kernels (Schroeder, 1975;Schroder, Clark, & Saltzer, 1977) for MULTICS.…”

Section: The Open Source Alternativementioning

confidence: 99%

Global Information Technologies

2008

View full text Add to dashboard Cite

Global information technologies : concepts, methodologies, tools and applications / Felix Tan, editor.v. cm. Summary: "This collection compiles research in all areas of the global information domain. It examines culture in information systems, IT in developing countries, global e-business, and the worldwide information society, providing critical knowledge to fuel the future work of researchers, academicians and practitioners in fields such as information science, political science, international relations, sociology, and many more"--Provided by publisher.Includes AbstrActThis chapter reports on our experiences with POSSE, a project studying "Portable Open Source Security Elements" as part of the larger DARPA effort on Composable High Assurance Trusted Systems. We describe the organization created to manage POSSE and the significant acceleration in producing widely used secure software that has resulted. POSSE's two main goals were, first, to increase security in open source systems and, second, to more broadly disseminate security knowledge, "best practices," and working code that reflects these practices. POSSE achieved these goals through careful study of systems ("audit") and starting from a well-positioned technology base (OpenBSD). We hope to illustrate the advantages of applying OpenBSD-style methodology to secure, open-source projects, and the pitfalls of melding multiple open-source efforts in a single project.

show abstract

Section: The Open Source Alternativementioning

confidence: 99%

Global Information Technologies

2008

View full text Add to dashboard Cite

show abstract

“…ACLs [Ritchie and Thompson 1974], in which only one entry in the list is ever used to grant a user access. For example, an ACL containing an entry granting a group access to a file followed by an entry denying the group all other accesses ensures that a member of that group receives the granted accesses and no more.…”

Section: Access Controlmentioning

confidence: 99%

Improving the granularity of access control for Windows 2000

Swift

Hopkins

Brundrett

et al. 2002

ACM Trans. Inf. Syst. Secur.

View full text Add to dashboard Cite

________________________________________________________________________This paper presents the mechanisms in Windows 2000 that enable fine-grained and centrally managed access control for both operating system components and applications. These features were added during the transition from Windows NT 4.0 to support the Active Directory, a new feature in Windows 2000, and to protect computers connected to the Internet. While the access control mechanisms in Windows NT are suitable for file systems and applications with simple requirements, they fall short of the needs of applications with complex data objects. Our goal was to use operating system access control mechanisms to protect a large object hierarchy with many types of objects, each with many data properties. We also wanted to reduce t he exposure of users to untrustworthy or exploited programs.We introduced three extensions to support these goals. First, we extended the entries in access control lists to provide an unlimited number of access rights for a single object and to allow grouping those rights for efficiency. Second, we extended the entries to specify precisely how access control lists are assigned to each distinct type of object, instead of treating all types identically. Finally, we extended the data structure identifying users' identity to the operating system to allow users to restrict the set of objects a program may access. These changes allow a single access control mechanism to be used to protect both system and application resources, as well as protect users from each other and users from their programs, simplifying both program development and system management.

show abstract

“…The implementations of DSAI4 and ACE discussed in this paper run on a PDP-11/60 minicomputer under the UNIX operating system [Ritc74]. Both understanders are configured as a set of up to seven 65 kilobyte processes programed in aryland VLISP [Kirb77].…”

Section: Implementation Notementioning

confidence: 99%