A Multilevel File System for High Assurance
Loading...
Authors
Irvine, Cynthia E.
Subjects
Advisors
Date of Issue
1995-05-00
Date
Publisher
Proceedings of the IEEE Symposium on Security and Privacy
Language
Abstract
The designs of applications for multilevel systems cannot merely duplicate those of the untrusted world. When applications are built on a high assurance base they will be constrained by the underlying policy enforcement mechanism_ Consideration must be given to the creation and management of multilevel data structures by untrusted subjects_ Applications should be designed to rely upon the TCB s security policy enforcement services rather than build new access control services beyond the TCB perimeter The results of an analysis of the design of a general purpose le system developed to execute as an untrusted application on a high assurance TCB are presented. The design illustrates a number of solutions to problems resulting from a high assurance environment.
Type
Article
Description
Series/Report No
Department
Computer Science (CS)
Identifiers
NPS Report Number
Sponsors
Funding
Format
Citation
Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, pp. 78-87, May 1995
Distribution Statement
Approved for public release; distribution is unlimited.
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.