====== Tópicos em controle de acesso ====== Frameworks de controle de acesso local: * [[https://en.wikipedia.org/wiki/Linux_Security_Modules|LSM]] * [[https://en.wikipedia.org/wiki/Security-Enhanced_Linux|SELinux]] * [[https://en.wikipedia.org/wiki/Tomoyo_Linux|Tomoyo]] * [[https://en.wikipedia.org/wiki/AppArmor|AppArmor]] * [[https://en.wikipedia.org/wiki/Polkit|Polkit]] * [[https://www.cl.cam.ac.uk/research/security/capsicum|Capsicum]] * [[https://en.wikipedia.org/wiki/Mandatory_Integrity_Control|Windows MIC]] * [[https://en.wikipedia.org/wiki/User_Account_Control|Windows UAC]] * [[https://en.wikipedia.org/wiki/Simplified_Mandatory_Access_Control_Kernel|Smack]] * [[https://docs.freebsd.org/en/books/arch-handbook/mac|Trusted BSD MAC]] * [[https://en.wikipedia.org/wiki/Capability_Hardware_Enhanced_RISC_Instructions|CHERI]] * [[https://en.wikipedia.org/wiki/RSBAC|RSBAC]] Frameworks de controle de acesso distribuídos: * [[https://en.wikipedia.org/wiki/OAuth|Oauth]] * [[https://en.wikipedia.org/wiki/XACML|XACML]] - Arquitetura e políticas * [[https://www.usenix.org/conference/atc19/presentation/pang|Google Zanzibar]] * [[https://docs.cloud.google.com/iam/docs/overview|Google IAM]] * [[https://en.wikipedia.org/wiki/Apache_Fortress|Apache Fortress]] * [[https://openfga.dev|OpenFGA]] * [[https://www.openpolicyagent.org|Open Policy Agent]] /* * [[https://en.wikipedia.org/wiki/Security_Assertion_Markup_Language|SAML]] */ Produtos comerciais: * [[https://grsecurity.net|Grsecurity]] * [[https://gdmissionsystems.com/products/multilevel-security/pitbull-trusted-operating-system|Pitbull]] ^ Data ^ Contexto ^ Tópico ^ Grupo ^ | 04/11 | local | LSM | Lilian, Mayara e Gabriela | | 04/11 | local | AppArmor | Julio Martins | | 04/11 | local | Windows UAC | Selton, Gabriel Claudino, Matheus Marczuk | | 04/11 | local | Windows MIC | Gustavo Cavalcante, Mozart Dias | | 04/11 | local | RSBAC | Millena, Pedro, Ramon | | 04/11 | local | SMACK | Matheus Feitosa, Juliana Zambom e Matheus Telles | | 06/11 | local | RLS/CLS | Brenda Ricci, Nicolas Rizzardi, Patrick Leme | | 06/11 | local | Polkit | Matheus Ferreira Marquesini e Paulo Henrique Jankosz Perreira | | 06/11 | local | SELinux | Mardoqueu e Davi Lazzarin | | 06/11 | local | CHERI | Thales de Lima, Felipe Pereira, Daniel Vieira | | 06/11 | local | Tomoyo | Gustavo Binder, Marcelo Schreiber | | 06/11 | local | Trusted BSD MAC | Luiz Wiedmer, Thiago de Mello, Bruno de Lima | | 11/11 | dist | OAuth | Erick Graeff, Eduardo Neves | | 11/11 | dist | Open Policy Agent | Daniel Lins, Marko Lozancic, Mateus Ruzene e Matheus Piovesan | | 11/11 | dist | Google IAM | Maria Luiza Palacio, Milena Mello e Gustavo Paulino | | 11/11 | dist | OpenFGA | Lucas Santos, Rafael Laurentino, Vitor Cumim | | 11/11 | dist | Google Zanzibar | Lucas Lopes, Arthur Santos e Nicolas Costa | | 11/11 | dist | Apache Fortress | Luíza Diapp e João Caboblo | **Atenção**: * Tópicos correlatos não listados acima podem ser sugeridos ao docente. * Cada apresentação deve ter duração aproximada de 15 minutos. * Priorize os aspectos "o que é", "para que serve", "como funciona" e "onde é usado". * Os slides em PDF devem ser enviados via Moodle até a data indicada nele.