My undergraduate thesis on a capability based security system for a data-centric operating system.
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

progress

suri312006 d3f4eda8 c31bb651

+59 -77
-65
2-implementation.typ
··· 1 - #import "template.typ": * 2 - 3 - 4 - #mol-chapter("Implementation") 5 - 6 - 7 - 8 - #lorem(100) 9 - 10 - 11 - 12 - 13 - // heavily inspired by the original twizzler paper / security paper 14 - // 15 - 16 - 17 - == Capabilities 18 - 19 - 20 - Capabilities are 21 - 22 - 23 - === Gates 24 - 25 - // talk about what gates can be useful for 26 - // 27 - // their design 28 - // 29 - // whateva 30 - 31 - === Flags 32 - 33 - // 34 - // How they can be used to specify how the signature is formed 35 - 36 - === Signature 37 - 38 - // verification from the whateva 39 - 40 - == Security Contexts 41 - // what is it? 42 - // its an object in its own right! 43 - // 44 - // a process must be attached to one, in order to store any capabilities 45 - // 46 - // what about the "detachable bit?" jail? 47 - // 48 - // what else 49 - 50 - 51 - 52 - == Key Pairs 53 - 54 - // the desgin of the keypair objects 55 - // 56 - // the design of the keys themselves 57 - // 58 - // how they can be used to sign multiple objects (compartmentalization) 59 - // 60 - 61 - 62 - 63 - 64 - 65 - #load-bib(read("refs.bib"))
+23
2-keypair.typ
··· 1 + #import "template.typ": * 2 + 3 + 4 + #mol-chapter("Key Pairs") 5 + 6 + // what are keypair objects ? 7 + 8 + // how are they represented in twizzler ? 9 + 10 + == Abstraction 11 + 12 + // the abstraction layer to represent multiple signing schemes 13 + 14 + 15 + == Compartmentalization 16 + // how they can be used to sign multiple objects (compartmentalization) 17 + // 18 + 19 + 20 + 21 + 22 + 23 + #load-bib(read("refs.bib"))
+16
3-cap.typ
··· 1 + #import "template.typ": * 2 + 3 + #mol-chapter("Capabilities") 4 + 5 + 6 + // define a capability 7 + 8 + // the atomic unit of security 9 + 10 + == Gates 11 + 12 + == Flags 13 + 14 + == Signature 15 + 16 + #load-bib(read("refs.bib"))
-1
3-results.typ 5-results.typ
··· 1 - 2 1 #import "template.typ": * 3 2 #mol-chapter("Results") 4 3
4-conclusion.typ 6-conclusion.typ
+13
4-secctx.typ
··· 1 + #import "template.typ": * 2 + 3 + #mol-chapter("Security Contexts") 4 + 5 + 6 + == Map 7 + // on disk storage for security contexts for efficient lookup 8 + 9 + 10 + // what else is special about security contexts? 11 + 12 + 13 + #load-bib(read("refs.bib"))
thesis.pdf

This is a binary file and will not be displayed.

+7 -11
thesis.typ
··· 3 3 #show: mol-thesis 4 4 5 5 6 - // what am i even supposed to write about maneeee 7 - // 8 - // what have i even done 9 - // 10 - // am i a fraud 11 - // 12 - // 13 6 14 7 #mol-titlepage( 15 - title: "Design, Implementation, and Verification of a Security System for Data-Centric Operating Systems", 8 + // title: "Design, Implementation, and Verification of a Security System for Data-Centric Operating Systems", 9 + title: "Twizzler-Security\nA Capability-Based Security System for Twizzler", 16 10 // title: "Gurt", 17 11 author: "Surendra Jammishetti", 18 12 birth-date: "April 1st, 1980", ··· 52 46 53 47 #outline() 54 48 #include "1-introduction.typ" 55 - #include "2-implementation.typ" 56 - #include "3-results.typ" 57 - #include "4-conclusion.typ" 49 + #include "2-keypair.typ" 50 + #include "3-cap.typ" 51 + #include "4-secctx.typ" 52 + #include "5-results.typ" 53 + #include "6-conclusion.typ" 58 54 #pagebreak() 59 55 60 56 #load-bib(read("refs.bib"), main: true)