A Dynamic End-to-End Security for Coordinating Multiple Protections within a Linux Desktop

Index Terms-end-to-end security, multi-domains, protection mechanisms, coordination, Linux. Abstract-Currently, application protection models are mostly static and independent. It means that the applications cannot handle multiple domains to manage accordingly the permissions for a given user request. Managing multiple domains is becoming a more and more common issue as desktop applications are growing in complexity to provide better-designed user interfaces. Today, protection systems are almost everywhere. Multiple systems of protection are available from the Linux kernel such as SELinux or PIGA-Protect to get a Mandatory Protection. Those systems provide a per-syscall validation process. Network protections are also available such as the IPtables firewalling mechanism. Protections for languages or frameworks also exist such as for Java or .NET. But, solutions are missing for coordinating the various mechanisms that protect different levels of the global information system. The purpose is to reuse and coordinate efficiently those different levels of protection in order to provide a end-to-end protection that manages dynamically multiple domains. Thus, the same host can support multiple domains for the user requests while providing a transparent endto-end security that protects against complex scenarios of attack. This paper describes an attempt to deliver such a system for controlling efficiently the user requests

A continuous approach for modelling fracture formation and its application to gas fracturing of Callovo-Oxfordian claystone

The Callovo-Oxfordian argillite beds located some 500m beneath the surface of the Meuse plain have been chosen as a site for the storage of nuclear material, particularly spent fuels and high level wastes. Determining the medium to long term mechanical response of the argillite to boring, changes in saturation arising during stockage and following sealing is essential to planning the repository. The presence of metals in the components of the repository conducts to the production of gases and to a pressure build up which are being taken into account through experiments to measure the resistance of the argillite subjected to hydraulic stresses. Recent advances in a model [1] implemented in the Cast3m finite elements code couple poroelasticity, plastic deformation, damage through cracking at the micro-scale, reversible opening of macro-scale cracks, diffusion of water and air with associated changes in degree of saturation and pore pressure, and swelling of clay minerals in a single, continuous model. Realistic simulations of argillite, incorporating spatial variations of properties such as arise from bedding planes, can be easily prepared and the model applied to them. Since the mechanical properties of argillite change from a relatively soft and plastic response near saturation to more a brittle response when dried, the variation of mechanical properties with the degree of saturation are an intrinsic part of the model. Simulations of the hydraulic fracturing experiments using the model reproduce the behaviour observed in the laboratory