Access Control for Newly Created Objects: Principles, Abstract Model and Implementation

Abstract

We describe principles and implementation details of access control for newly created objects – like files and clipboard data. This access control mode can be used to enhance the well known access control methods based on access subjects and static access objects. It allows to defend against many actual threats based attacks. The principles of such control mode are based on excluding access object entity from access control policy and inheritance of creator credentials.

Keywords

• access control
• newly created objects
• abstarct model