Windows Access Control Demystified

["Steven M. Christey" <coley () mitre org>]

Not sure if anyone's really looked at this yet, but the "Windows
Access Control Demystified" paper talks about a tool that was created
to find complex privileges/ACL problems in Windows.  I've always
suspected that the fine-grained nature of Windows' security mechanisms
would result in difficult-to-find, easy-to-make vulnerabilities, and
this paper helps to demonstrate the concept.

http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf

What do others think?

- Steve