From Erights
(Difference between revisions)
|
|
| Line 1: |
Line 1: |
| - | [http://web.comlab.ox.ac.uk/oucl/work/toby.murray/tools/authodox/ Authodox] is used to automatically detect excess authority in systems of interacting objects, by modelling them in CSP and applying the FDR automatic refinement-checker. It was originally based on [http://web.comlab.ox.ac.uk/oucl/work/toby.murray/papers/AALPE.pdf Authority Analysis for Least Privilege Environments] and [http://www.comlab.ox.ac.uk/files/2690/AOCS.pdf Analysing Object-Capability Security]. | + | [http://web.comlab.ox.ac.uk/oucl/work/toby.murray/tools/authodox/ Authodox] is used to automatically detect excess authority in systems of interacting objects. |
| - | | + | |
| - | Authodox is no longer supported. Some of the ideas embodied in its most recent release (Version 0.2, May 19, 2008) have been superseded by work that followed that release. The best reference on using CSP to model and reason about authority and object-capability systems, in particular, is Toby Murray's D.Phil. thesis, [http://ertos.nicta.com.au/publications/papers/Murray:phd.abstract?bib=login Analysing the Security Properties of Object-Capability Patterns].
| + | |
| | | | |
| | [[Category:Applications]] | | [[Category:Applications]] |
| - | [[Category:Formal Reasoning]]
| |
Revision as of 00:00, 31 October 2007
Authodox is used to automatically detect excess authority in systems of interacting objects.
