Abstractions for usable information flow control in Aeolus

摘要: Despite the increasing importance of protecting confidential data, building secure software remains as challenging ever. This paper describes Aeolus, a new platform for distributed applications. Aeolus uses information flow control to provide confidentiality and data integrity. It differs from previous systems in way that we believe makes it easier understand use. new, simpler security model, first combine standard principal-based scheme authority management with thread-granularity tracking. The principal hierarchy matches developers already reason about access control, coarse-grained tracking eases task defining program's restrictions. In addition, provides number mechanisms (authority closures, compound tags, boxes, shared volatile state) support common design patterns application design.