The Jobstream Separator (JSS) has been proposed to automate the costly, inefficient, and inconvenient manual process utilized to “change colors” (security levels) at AF WWMCCS sites. The JSS would provide complete isolation among WWMCCS users and data at differing levels Read more…
This report summarizes work to date toward the development of a provably secure operating system. Discussed here are a methodology for the design, implementation, and proof of properties of large computing systems, the design of a secure operating system using Read more…
Security has become an important and challenging goal in the design of computer systems. This survey focuses on two system structuring concepts that support security; namely, small protection domains and extended-type objects. These two concepts are especially promising because they Read more…
This thesis distinguishes three methods of attacking internal protection mechanisms of computers: inadvertent disclosure, penetration, and subversion. Subversion is shown to be the most attractive to the serious attacker. Subversion is characterized by three phases of operations: the inserting of Read more…
A security evaluation of Multics for potential use as a two-level (Secret/Top Secret) system in the Air Force Data Services Center (AFDSC) is presented. An overview is provided of the present implementation of the Multics Security controls. The report then Read more…
The long-term goal of the KSOS effort is to develop a commercially viable computer operating system for the DEC PDP-11/70 that is compatible with the Bell Telephone Laboratories’ UNIX*tm, is capable of efficiency comparable to standard UNIX*tm, enforces multilevel security Read more…
The trusted computer system evaluation criteria defined in this document classify systems into four broad hierarchical divisions of enhanced security protection. They provide a basis for the evaluation of effectiveness of security controls built into automatic data processing system products. Read more…
The Protection Analysis project was initiated at ISI by ARPA IPTO to further understand operating system security vulnerabilities and, where possible, identify automatable techniques for detecting such vulnerabilities in existing system software. The primary goal of the project was to Read more…
For the past several years ESD has been involved in various projects relating to secure computer systems design and operation. One of the continuing efforts, started in 1972 at MITRE, has been secure computer system modeling. The effort initially produced Read more…
Introduction This is the final report of a study, the purpose of which was to improve the computer security auditing and surveillance capability of the customer’s systems. Background Audit trails are taken by the customer on a relatively long term (weekly Read more…