Design and implementation of an audit subsystem for a separation kernel
Toh, Boon Pin
Clark, Paul C.
MetadataShow full item record
A separation kernel can be used as the foundation of a high assurance system that enforces mandatory security policies. The contexts in which such separation kernels might be used include support for a distributed trusted path, high assurance routing, and for a multilevel secure mobile device that supports an extraordinary access partition for access to sensitive data during a crisis. Separation kernel requirements call for an audit subsystem that helps to enforce accountability policy by allowing administrators to detect unauthorized activities from the logs collected. The Least Privilege Separation Kernel (LPSK) being implemented for the Trusted Computing Exemplar (TCX) project did not have an audit subsystem. This thesis describes the design and implementation of an audit subsystem for the LPSK. Requirements were gathered based on an existing specification and protection profile. A variable-length token-based audit log format was designed to allow flexibility in recording different types of events. Interfaces to other LPSK modules and non-LPSK modules were designed and a prototype was developed. Testing results show that the prototype supports the LPSK audit requirements. Hence, this work demonstrates the feasibility of implementing the LPSK audit subsystem based on the proposed design.
RightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.
Showing items related by title, author, creator and subject.
Agrawal, B.N. (2005);This paper presents a review of the spacecraft design program at the Naval Postgraduate School. This program is part of the space systems engineering curriculum. In this curriculum, the students take at least one course ...
Lee, Jonathan (Monterey, California: Naval Postgraduate School, 2015-09);Space systems today are highly customized systems for which standardized interfaces rarely exist. A majority of the cost can be attributed to nonrecurring engineering costs, since these systems are redesigned each time a ...
A 3-channel 14-bit optimum SNS wideband digital antenna: analysis of the electro-optic sampling front end Foster, Kevin D (Monterey, California. Naval Postgraduate School, 1997-09);Space considerations onboard naval surface ships frequently preclude adequate separation between high frequency (HF) transmit antennas and HF receive only antennas. As a result, high power shipboard emanations (for example ...