Cooperation of Mutually Suspicious Subsystems in a Computer Utility

This thesis describes practical protection mechanisms that allow mutually suspicious subsystems to cooperate in a single computation and still be protected from one another. The mechanisms are based on the division of a computation into independent domains of access privilege, each of which may enc...

Full description

Bibliographic Details
Main Author: Schroeder, Michael D.
Other Authors: Saltzer, Jerome H.
Published: 2023
Online Access:https://hdl.handle.net/1721.1/149414