A new approach to security evaluation of operating systems

Abstract

This paper addresses to the technique of security evaluation based on security attributes analysis in discretionary access control. A multi-level framework is built to calculate a set of effective user's permissions automatically. Information about the effective access rights is necessary during security verification procedure. In this paper we also propose a schema of Security Evaluation System. © Springer-Verlag Berlin Heidelberg 2007.