The state of the art of application restrictions and sandboxes: A survey of application-oriented access controls and their shortfalls

ZC Schreuders, T McGill, C Payne - Computers & Security, 2013 - Elsevier
Under most widely-used security mechanisms the programs users run possess more
authority than is strictly necessary, with each process typically capable of utilising all of the …

The functionality-based application confinement model

ZC Schreuders, C Payne, T McGill - International journal of information …, 2013 - Springer
This paper presents the functionality-based application confinement (FBAC) access control
model. FBAC is an application-oriented access control model, intended to restrict processes …