Defending against application exploits model of access control
This article is dedicated to the problem of defending against application level exploits. We suggest a method based on process (application) access control to file objects. Implementation correctness requirements are formulated. Secure system models are developed. We suggest the quantitative criteria to rate security level.