Model-driven Configuration of OS-level Mandatory Access Control

摘要

Trust and assurance of mobile platforms is a prime objective when considering their use in security-critical scenarios like in healthcare or e-government. Currently, several complementary approaches can be found in literature, ranging from purely hardware based to operating system level and application level solutions. Together, they build a "trusted and secured" technology stack. However, the complex policy configuration mechanisms at every single layer also represent the biggest stumbling block for a rapid adoption. We propose a practicable and efficient solution for leveraging operating system level and application level security mechanisms to realize security-critical applications and services.