A Multilevel File System for High Assurance

Abstract

The designs of applications for multilevel systems cannot merely duplicate those of the untrusted world. When applications are built on a high assurance base they will be constrained by the underlying policy en forcement mechanism. Consideration must be given to the creation and management of multilevel data structures by untrusted subjects. Applications should be designed to rely upon the TCB's security policy enforcement services rather than build new access control services beyond the TCB perimeter. The results of an analysis of the design of a general purpose file system developed to execute as an untrusted application on a high assurance TCB are presented. The design illustrates a number of solutions to problems resulting from a high assurance environment.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
May 01, 1995
Accession Number
ADA591319

Entities

People

  • Cynthia E. Irvine

Organizations

  • Naval Postgraduate School

Tags

Communities of Interest

  • Space

DTIC Thesaurus Topics

  • Computer Access Control
  • Computer Science
  • Computer Security Techniques
  • Computers
  • Consistency
  • Cybersecurity
  • Database Management Systems
  • Databases
  • Department Of Defense
  • Directories
  • Indicators
  • Language
  • Multithreading
  • Operating Systems
  • Security
  • Software Development

Readers

  • Cybersecurity.
  • Systems Analysis and Design