| An Infrastructure for Multi-Level Secure Service-Oriented Architecture (MLS-SOA) Using the Multiple Single-Level Approach |
17 Dec 2009 |
18 pages |
| Authors:
Jim Luo; Myong Kang; NAVAL RESEARCH LAB WASHINGTON DC CENTER FOR HIGH ASSURANCE COMPUTING SYSTEMS (CHACS)
|
 | SOA is the premier framework for integrating complex heterogeneous computing systems in business and government. To utilize SOA in sensitive military systems, however, the requirements for multi-level security (MLS) must be addressed. This paper presents a framework for adding MLS capabilities to existing SOA infrastructure. Specifically, it will allow clients in High to securely utilize services in Low. MLS issues including covert channels, release of identity information, and inference attacks ... |
|
| A Framework for Automatic Web Service Composition |
30-Apr-2009 |
23 pages |
| Authors:
Anya Kim; Myong Kang; Catherine Meadows; John Sample; Elias Ioup; NAVAL RESEARCH LAB WASHINGTON DC CENTER FOR HIGH ASSURANCE COMPUTING SYSTEMS (CHACS)
|
| Complex mission plans need to incorporate information from various sources and domains to achieve a task. This information is available through a variety of web services in the Service-Oriented Architecture (SOA), but the ability to automatically compose them into a single coherent task is not readily available. Traditional composition approaches require human-intensive involvement, making them time-consuming and error prone. Therefore, the ability to automatically or semi-automatically orchestrate web services in ... |
|
| Documenting Xenon's Page_Alloc Module |
10 DEC 2007 |
40 pages |
| Authors:
Jr. Kirby James; John McDermott; Myong Kang; Bruce Montrose; NAVAL RESEARCH LAB WASHINGTON DC CENTER FOR HIGH ASSURANCE COMPUTING SYSTEMS (CHACS)
|
| One of the critical assurance requirements for achieving medium or high assurance is a requirement for significant modularity in design and implementation. As part of the Xenon effort to create a secure Xen with a medium to high degree of assurance, we have embarked on its remodularization, a documented decomposition into well-defined pieces with well-defined relationships among them. This remodularization of Xen is based on the information hiding principle. Associated ... |
|
| The Protections of Bilaterally Sensitive Information on a Restricted Multilateral Network |
19 OCT 2007 |
12 pages |
| Authors:
Myong Kang; Steven Pieper; Jeremy Smith; Allen Yeh; NAVAL RESEARCH LAB WASHINGTON DC
|
| Historically, fully separate technical implementation was required for each bilateral information exchange, which is largely supported by the U.S. in terms of facilities, manpower, and infrastructure at substantial cost. In this report, we propose a solution that will allow the U.S. to consolidate some of these networks while assuring that information will be treated with the appropriate degree of confidentiality. |
|
| Xenon Formal Security Policy Model |
14 AUG 2007 |
31 pages |
| Authors:
John McDermott; James Kirby; Myong Kang; Bruce Montrose; NAVAL RESEARCH LAB WASHINGTON DC CENTER FOR HIGH ASSURANCE COMPUTING SYSTEMS (CHACS)
|
| Xenon is a high-assurance virtual machine monitor based on the Xen open-source hypervisor. We model the Xenon high-assurance virtual machine monitor's security policy as a conditional non-interference policy, using an event-based paradigm and the Communicating Sequential Processes (CSP) formalism. Our single model formally describes not only the separation of information flow but also the sharing. We also present our strategy for showing correspondence between this model and the Xenon interface. ... |
|
| Adding Semantic Support to Existing UDDI Infrastructure |
31 OCT 2005 |
58 pages |
| Authors:
Jim Luo; Bruce Montrose; Myong Kang; NAVAL RESEARCH LAB WASHINGTON DC INFORMATION TECHNOLOGY DIV
|
| Universal Description Discovery and Integration (UDDI) is not capable of handling semantic markups for Web services due to its flat data model and limited search capabilities. In this paper, the authors introduce an approach to support semantic service description and match making with registries that conform to the UDDI V3 specification. Specifically, they discuss how to store complex semantic markups in a UDDI data model and use that information to ... |
|
| Security Ontology for Annotating Resources |
31 AUG 2005 |
54 pages |
| Authors:
Anya Kim; Jim Luo; Myong Kang; NAVAL RESEARCH LAB WASHINGTON DC
|
| Annotation with security-related metadata enables discovery of resources that meet security requirements. this paper presents the NRL Security Ontology, which complements existing ontologies in other domains that focus on annotation of functional aspects of resources. Types of security information that could be described include mechanisms, protocols, objectives, algorithms, and credentials in various levels of detail and specificity. The NRL Ontology is more comprehensive and better organized than existing security ontologies. ... |
|
| An Approach for Semantic Query Processing with UDDI |
2005 |
11 pages |
| Authors:
Jim Luo; Bruce Montrose; Myong Kang; NAVAL RESEARCH LAB WASHINGTON DC CENTER FOR HIGH ASSURANCE COMPUTING SYSTEMS (CHACS)
|
| UDDI is not suitable for handling semantic markups for Web services due to its flat data model and limited search capabilities. In this paper, we introduce an approach to allow for support of semantic service descriptions and queries using registries that conforms to UDDI V3 specification. Specifically, we discuss how to store complex semantic markups in the UDDI data model and use that information to perform semantic query processing. Our ... |
|
Reports by Author
