Beyond SELinux: the Case for Behavior-Based Policyand Trust Languages

Despite the availability of powerful mechanisms for security policy and accesscontrol, real-world information security practitioners—both developers and securityofficers—still find themselves in need of something more. We believe that this is thecase because available policy languages do not provide clear and intelligible ways toallow developers to communicate their knowledge and expectations of trustworthy behaviorsand actual application requirements to IT administrators...