|
| |
|
|
Modular-Extensible Information System
Leixner, Petr ; Kupčík, Jan (referee) ; Bartík, Vladimír (advisor)
Information systems tend to be developed by specialized companies by virtue of exactly defined requirements laid by customers. However, customers usually want to enlarge the original information systems with further functions after some time. Supplying companies have to adjust the completed systems, which is complicated, or they have to remake the systems according to new demands. In this thesis I deal with the creation of a basic information system which is easy to be enriched with new functions. By means of addition or adjustment of the already installed modules the system can be supplemented in accordance with new requirements without the necessity to change the whole contents complicatedly. Such a system supports an extended management of users' access privileges in each of its enlargements.
|
|
|
Security containers and access rights in HelenOS
Henek, Štěpán ; Děcký, Martin (advisor) ; Bulej, Lubomír (referee)
Title: Security containers and access rights in HelenOS Author: Štěpán Henek Department: Department of Software Engineering Supervisor: Mgr. Martin Děcký Supervisor's e-mail address: decky@ksi.mff.cuni.cz Abstract: The goal of this thesis is to design and implement security containers (contexts) for tasks and access rights mechanisms for microkernel operating systems. The access rights mechanisms implement common paradigms such as user identification, groups of users, system entities (tasks, files) ownership, user capabilities and access control lists. Moreover, the design allows to implement hierarchical security domains, where each domain is able to delegate a subset of its permissions to its subdomains. The design also enables the implementa- tion of containers, which mutually isolate those tasks, which are situated in security domains with an empty intersection. The thesis comprises of an analysis and evaluation of possible approaches, a prototype imple- mentation in HelenOS with respect to its specific properties (emphasis on a small context switch overhead, delegation of security mechanisms to privileged user space tasks, etc.) and also com- parison with implementations of security containers and access rights mechanisms in generally available operating systems. Keywords: security contexts, access...
|
|
| |
|
|
Modular-Extensible Information System
Leixner, Petr ; Kupčík, Jan (referee) ; Bartík, Vladimír (advisor)
Information systems tend to be developed by specialized companies by virtue of exactly defined requirements laid by customers. However, customers usually want to enlarge the original information systems with further functions after some time. Supplying companies have to adjust the completed systems, which is complicated, or they have to remake the systems according to new demands. In this thesis I deal with the creation of a basic information system which is easy to be enriched with new functions. By means of addition or adjustment of the already installed modules the system can be supplemented in accordance with new requirements without the necessity to change the whole contents complicatedly. Such a system supports an extended management of users' access privileges in each of its enlargements.
|
guest ::
