Skip to Main content Skip to Navigation
Theses

Intégration de l’utilisateur au contrôle d’accès : du processus cloisonné à l’interface homme-machine de confiance

Abstract : This thesis aims to provide end users with tools enhancing the security of the system they use. First, user activities of different sensitivities require to be confined in dedicated domains by an access control fitting the user’s needs. Next, in order to maintain this confinement, users must be able to reliably identify the domains they interact with, from their machine’s interface. In the first part, we present a new confinement mechanism that seamlessly adapts to user activity changes, without altering the behavior of existing access controls nor degrading the security of the system. We also describe a first implementation named StemJail, based on Linux namespaces. We improve this confinement tool by creating a new Linux security module named Landlock which can be used without requiring privileges. In a second step, we identify and model the security properties a human-computer interface (HCI) requires for the reliable and secure understanding of the system by the user. Precisely, the goal is to establish a link between the entities with which the users think they communicate, and those with which they actually communicate. This model enables to evaluate the impact of HCI components jeopardization and helps assessing a given architecture.
Document type :
Theses
Complete list of metadatas

Cited literature [73 references]  Display  Hide  Download

https://tel.archives-ouvertes.fr/tel-01762144
Contributor : Abes Star :  Contact
Submitted on : Monday, April 9, 2018 - 4:31:07 PM
Last modification on : Friday, October 23, 2020 - 5:02:28 PM

File

these_mickael-salaun.pdf
Version validated by the jury (STAR)

Identifiers

  • HAL Id : tel-01762144, version 1

Citation

Mickaël Salaün. Intégration de l’utilisateur au contrôle d’accès : du processus cloisonné à l’interface homme-machine de confiance. Cryptographie et sécurité [cs.CR]. Institut National des Télécommunications, 2018. Français. ⟨NNT : 2018TELE0006⟩. ⟨tel-01762144⟩

Share

Metrics

Record views

973

Files downloads

3619