Split Capabilities for Access Control

[摘要] Split capabilities represent a new way to control access to resources that has advantages over traditional approaches in both scalability and revocation of privileges. We present the basic idea of split capabilities and describe how they were used in a commercial system. We also explain why a variety of common attacks against a system using split capabilities fail. Notes: Copyright IEEE To be published in IEEE Software 13 Pages

[发布机构] HP Development Company

[学科分类] 计算机科学（综合）

[关键词] access control;computer security;capability systems