An Optimistic Mandatory Access Control Model for Distributed Collaborative Editors

Abdessamad Imine 1 Asma Cherif 1 Michaël Rusinowitch 1
1 CASSIS - Combination of approaches to the security of infinite states systems
FEMTO-ST - Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies (UMR 6174), INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : Distributed Collaborative Editors (DCE) provide computer support for modifying simultaneously shared documents, such as articles, wiki pages and programming source code, by dispersed users. Controlling access in such systems is still a challenging problem, as they need dynamic access changes and low latency access to shared documents. In this paper, we propose a Mandatory Access Control (MAC) based on replicating the shared document and its authorization policy at the local memory of each user. To deal with latency and dynamic access changes, we use an optimistic access control technique where enforcement of authorizations is retroactive. We show that naive coordination between updates of both copies can create security hole on the shared document by permitting illegal modification, or rejecting legal modification. Finally, we present a novel framework for managing authorizations in collaborative editing work which may be deployed easily on P2P networks.
Type de document :
[Research Report] RR-6939, INRIA. 2009, pp.20
Liste complète des métadonnées

Littérature citée [21 références]  Voir  Masquer  Télécharger
Contributeur : Abdessamad Imine <>
Soumis le : lundi 18 mai 2009 - 17:14:25
Dernière modification le : vendredi 6 juillet 2018 - 15:06:10
Document(s) archivé(s) le : mercredi 22 septembre 2010 - 12:47:39


Fichiers produits par l'(les) auteur(s)


  • HAL Id : inria-00381941, version 2


Abdessamad Imine, Asma Cherif, Michaël Rusinowitch. An Optimistic Mandatory Access Control Model for Distributed Collaborative Editors. [Research Report] RR-6939, INRIA. 2009, pp.20. 〈inria-00381941v2〉



Consultations de la notice


Téléchargements de fichiers