Trellis: Privilege Separation for Multi-User Applications Made Easy

Speaker/Bio

Andrea Mambretti is a PhD student in Information Assurance where he is working at Seclab, and he is being advised by William Robertson and Engin Kirda. His main interest is in system security with special focus on operating systems, program analysis and compilers.

Abstract

Trellis is an approach for expressing hierarchical access control policies in applications and enforcing these policies during execution. The approach enhances the development toolchain and the operating system to allow programmers to secure their applications from GUI misuse and profile privilege escalation within the application.

References