A Note on the Confinement Problem.¶
Lampson, B. W. (1973). A Note on the Confinement Problem. Communications of the ACM, 16(10), 613-615.
Cited by¶
3 citations across 3 artifacts.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Confidentiality
- Confidentiality therefore binds use after access, the single sentence from which every other property of the prime follows.
This sourcePoses the problem of constraining what a program legitimately given data may afterwards do with it, and enumerates the open-ended set of leakage channels that makes the transmission surface impossible to inventory.
- Confidentiality therefore binds use after access, the single sentence from which every other property of the prime follows.
- Escape and Leakage
- The pattern encodes that containment is never perfect; boundaries always have seams and pathways available for escape, and whether escape occurs depends on the pressure differential, the permeability of alternative pathways, and whether those pathways are explicitly designed or merely overlooked—a claim Lampson (1973) made canonical in his foundational analysis of the confinement problem.
This sourceCanonical computer-security analysis of how a confined program leaks information through legitimate, storage, and covert channels; establishes that no boundary is perfectly impermeable and supplies the pathway taxonomy underlying containment design.
- The pattern encodes that containment is never perfect; boundaries always have seams and pathways available for escape, and whether escape occurs depends on the pressure differential, the permeability of alternative pathways, and whether those pathways are explicitly designed or merely overlooked—a claim Lampson (1973) made canonical in his foundational analysis of the confinement problem.
- Markov Blanket
- The identical logic governs a cell membrane (all matter and signal exchange passes through receptors and transporters; a toxin exploiting an unguarded channel is a side-channel) and a need-to-know intelligence compartment (the cleared liaison is the blanket; an unauthorized back-channel is the leak).
This sourceCoins and defines covert channels — paths not intended for information transfer — the canonical reference for side/covert-channel leakage as a failure of a constructed boundary (need-to-know compartment).
- The identical logic governs a cell membrane (all matter and signal exchange passes through receptors and transporters; a toxin exploiting an unguarded channel is a side-channel) and a need-to-know intelligence compartment (the cleared liaison is the blanket; an unauthorized back-channel is the leak).
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:f6a23916be00 · see in the full table