>> Random references to capability information

>>> Introductory Texts

• 17C3-CapOs
  Slides for my "capability based systems" workshop at the ChaosCommunicationCongress2000
• http://www.eros-os.org/essays/00Essays.html
  Some introductory essays -- easy reading...
• http://www.cs.washington.edu/homes/levy/capabook/
  Capability-Based Computer Systems. Online version of a complete book by Henry M. Levy
• http://www.crit.org/~ping/alert/meaning.html
  The Meaning of Capability-Based Security
• http://www.skyhunter.com/marcs/capabilityIntro/
  Marcs introduction to capability based security
• http://cap-lore.com/CapTheory/
  Normans thought snippets: a lot of interesting stuff here...
• http://www.cs.berkeley.edu/~pingster/sec/project/
  Interaction Design for End-User Security: PRE-PUBLICATION DRAFT: A paper describing some ideas about man machine interaction with respect to capability based systems.
• http://zesty.ca/sid/
  User Interaction Design for Secure Systems

>>> Specific OS implementations

• http://www.eros-os.org/
  Promising project: A pure capability OS implementation for x86; developed unter GPL.
  • http://www.eros-os.org/mailman/listinfo/
    Mailinglist -- reading some discussions can be very enlighting
  • http://www.eros-os.org/papers/shap-thesis.ps
    Paper describing the EROS architecture and the confinement mechanism.
  • http://eros.cs.jhu.edu/gatherings/EWG2000/EWG2000.html
    EROS Working Group Meeting 2000
  • http://www.capidl.org
    CapIDL will be Capability-oriented Interface Definition Language, initially for describing EROS invocations.
• http://www.agorics.com/KeyKos/
  KeyKOS is a persistent, pure capability operating system. It was first developed by Tymshare on IBM 370. Later KeyLogic continued KeyKOS and ported it to -XXX-.
• http://www.cis.upenn.edu/~KeyKOS/Gnosis/Gnosis.html
  GNOSIS is a capability based OS whose construction began about 1975 at Tymshare. Development continued for several years at KeyLogic under the name "KeyKOS".
• http://www.informatik.uni-ulm.de/rs/projekte/SPEEDOS/
  Persistent pure capability OS
• http://www.cse.unsw.edu.au/~disy/Mungi/
  Single-address-space, orthogonally persistent, capability-based OS

>>> Capability based programming languages / object platforms

• http://www.erights.org/
  ELang provides a secure distributed object platform and p2p scripting language for writing Capability-Based Smart Contracts.
  • http://www.skyhunter.com/marcs/eDeskIndex.html
    Demo implementation of a desktop system on top of E.
• http://www.mozart-oz.org/
  The Mozart Programming System is an advanced development platform for intelligent, distributed applications. Mozart is based on the Oz language.
• http://www.agorics.com/joule.html
  Joule embodies a new computational model for building distributed systems.

>>> More abstract stuff

• http://www.researchindex.org/
  Provides a heap of interesting papers and makes them easy accessable. You could start at http://www.researchindex.org/cs?q=capability&cs=1 and spend the next two years reading...

>>> POSIX 1003.1e and other UNIX hardening hacks (mostly ugly)

• http://www.guug.de/~winni/posix.1e/
  POSIX 1003.1e "draft": Capabilities and MAC for UNIX
• http://www.trustedbsd.org
  Project implementing POSIX.1e and MAC on FreeBSD
• http://www.bsdcon.com/proceedings/spencer_minear/
  About Type Enforcement and POSIX.1e
• http://www.nsa.gov/selinux/
  Security-Enhanced Linux developed by the NSA. Offers MAC and TypeEnforcement for Linux
• http://www.kernel.org/pub/linux/libs/security/linux-privs/
  Linux-Privs Project: POSIX 3.1e on linux. Another resource: http://www.linuxsecurity.com/resource_files/server_security/linux-privs/linux-privs.html
• http://oss.sgi.com/projects/ob1/
  SGI released documentation about their Trusted IRIX (TRIX). http://techpubs.sgi.com/library/tpl/cgi-bin/browse.cgi?coll=0650&db=bks&cmd=toc&pth=/SGI_Admin/TCMW_AG. Don't forget to seach for some man pages about TRIX...
• http://www.hpl.hp.com/research/papers/trustedlinux.html
  This paper describes a compartment based security architecture for linux developed by HP. As far as i know this is the solution HP offers as "HP-LX".
• http://www.sun.com/trusted-solaris
  SUN Trusted Solaris
• http://www.sco.com/government/security/cmw_whtp.html
  SCO CMW+ 3.0 -- SCO trusted Unix