The Secure Distributed Operating System Design Project
Abstract
This report discusses some issues in distributed system security in the context of the design of a secure distributed operating system (SDOS). the design is targeted for an Al rating, as per DoD 5200.28-STD. Some new developments in formal verification methods are reported. Distributed system security is contrasted with single-host and network security, and described in the context of the Trusted Network Interpretation (NCSC-TG-005). Problems unique to distributed system security are discussed. An argument is made for implementing security features in higher protocol layers, corresponding roughly to the Session through Application layers of the OSI model. A new security policy, based on message-passing rather than reads and writes, is presented. The formal model, functional description, and a formal top level specification are also presented. Multilevel secure systems, Trusted operating systems, Distributed operating systems.
Document Details
- Document Type
- Technical Report
- Publication Date
- Jun 01, 1988
- Accession Number
- ADA204402
Entities
People
- Kathleen A. Huber
- Stephen T. Vinter
- Thomas A. Casey
Organizations
- BBN Technologies