Authodox

From Erights

Authodox is used to automatically detect excess authority in systems of interacting objects, by modelling them in CSP and applying the FDR automatic refinement-checker. It was originally based on Authority Analysis for Least Privilege Environments and Analysing Object-Capability Security.

Authodox is no longer supported. Some of the ideas embodied in its most recent release (Version 0.2, May 19, 2008) have been superseded by work that followed that release. The best reference on using CSP to model and reason about authority and object-capability systems, in particular, is Toby Murray's D.Phil. thesis, Analysing the Security Properties of Object-Capability Patterns.