(PDF Version)

The Role Compatibility Security Model

Paper for the Nordic Workshop on Secure IT Systems (NordSec) 2002

Amon Ott
Compuniverse

Email: ao@rsbac.org, WWW: http://www.rsbac.org

November 11, 2002

Abstract:

This paper presents the ``Role Compatibility'' access control model. It has been specially designed to address recent vulnerabilities in network servers by confining compromised services and protecting the base of the system. Furthermore, while being powerful and flexible when needed, it remains fast and easy to use for simple setups.

The model design goals, its specification and implementation outline are presented, followed by a brief comparison to the RBAC and the DTE model. Finally, a Webserver example shows how the model can be used to protect real server systems.

Keywords: Security Model, Access Control, Internet Server, Linux

• Introduction
• Design Goals
• Specification
  • Basic Definitions
  • Roles and Types
    • Roles
    • Types
  • Role Compatibility
  • Type Compatibility
  • Program Based Roles with Initial and Forced Roles
    • Initial Roles
    • Forced Roles
  • Standard Administration
  • Separation of Administration Duty
    • Admin Roles
    • Assign Roles
    • Special Rights
  • Lifetime Limits
• Implementation
  • Roles and Types
  • Role Compatibility, Admin and Assign Roles
  • Type Compatibility
  • Program Based Access Control with Initial and Forced Roles
  • Access Control Decision and Notification
• Comparison with RBAC and DTE Models
  • Role Based Access Control (RBAC)
    • Model Description
    • Comparison to RC Model
  • Domain and Type Enforcement (DTE)
    • Model Description
    • Comparison to RC Model
• Application Example
  • Base Protection
  • Service Encapsulation
  • Further Refinement
• Conclusion
• Bibliography
• About this document ...