prior user
163658·updated Oct 4, 2026No definition recorded.
Composition
Source
Preventing unauthorized and unintended information transfer via shared system resources stops information produced by the actions of prior users or roles (or actions of processes acting on behalf of prior users or roles) from being available to current users or roles (or current processes acting on behalf of current users or roles) that obtain access to shared system resources after those resources have been released back to the system. Information in shared system resources also applies to encrypted representations of information. In other contexts, the control of information in shared system resources is referred to as object reuse and residual information protection. Information in shared system resources does not address information remanence, which refers to the residual representation of data that has been nominally deleted, covert channels (including storage and timing channels) in which shared system resources are manipulated to violate information flow restrictions, or components within systems for which there are only single users or roles.the sentence this term was read in
generalized from a web lookup of the quoted expression, with 2 reviewed place(s) it is used as the term Verdict: compositional.
- 3.13.4: Prevent unauthorized and unintended information transfer via shared system resources - CSF Tools
- 03.13.04: Information in Shared System Resources - CSF Tools
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A relational security concept used to identify the source side of a resource-reuse threat: any principal — whether a human user, an assigned role, or a process acting on behalf of either — whose session has ended and whose allocated system resources (memory, cache, disk sectors, registers, etc.) have been returned to the system for reassignment. The concern is that information produced by the actions of prior users or roles may remain accessible to any current users or roles that obtain access to those shared system resources after the resources have been released back to the system. The phrase appears consistently in the object-reuse and residual-information-protection family of controls, where it anchors the threat model by naming the unintended originator of residual data, as opposed to the successor principal who must be denied access to it. This problem domain is commonly referred to as object reuse and residual information protection, covering shared resources such as registers, cache memory, main memory, and hard disks.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.