Capability-based security

1. What is capability-based protection system?
2. What is an example of a capability-based system?
3. What are OS capabilities?
4. Can you access a resource anonymously using capabilities?

What is capability-based protection system?

Capability-based security refers to the principle of designing user programs such that they directly share capabilities with each other according to the principle of least privilege, and to the operating system infrastructure necessary to make such transactions efficient and secure.

What is an example of a capability-based system?

An Example: Hydra Hydra is a capability-based protection system that provides considerable flexibility. A fixed set of possible access rights is known to and interpreted by the system. These rights include such basic forms of access as the right to read, write, or execute a memory segment.

What are OS capabilities?

Features of Operating System (OS)

• Protected and supervisor mode.
• Allows disk access and file systems Device drivers Networking Security.
• Program Execution.
• Memory management Virtual Memory Multitasking.
• Handling I/O operations.
• Manipulation of the file system.
• Error Detection and handling.
• Resource allocation.

Can you access a resource anonymously using capabilities?

12. Anonymous capability. To this end Bob, using techniques like Zero Knowledge Proof, can engage in a transaction with Alice to prove, without disclosing any personal information, he has the right to receive an access capability for a specific resource.