Enhanced Availability and Security by Rate Control Using Extended Policy Framework in SELinux

Abstract

In this paper we discussed an extension to security enhanced Linux (SELinux) to build a more available and secure system that has the capability to contain and mitigate denial of service (DoS) attacks by exercising rate control over resource usage. We presented an extended structure to compliment Mandatory Access Control policies of SELinux. Using this extension a system's resource usage by various entities can be kept under control, leading to a more available system.