A Secure, Manifest-Based Framework for Delegated Privilege Promotion

Rajarshi Chowdhury, Akshay Shah

Large-scale enterprise software systems commonly run as unprivileged service accounts to enforce least privilege, yet still depend on a small set of privileged components -- such a…