| DNS and Multilevel Secure Networks: Architectures and Recommendations |
Feb-2009 |
46 pages |
| Authors:
Cynthia E Irvine; Paul C Clark; David J Shifflett; Timothy E Lavin; NAVAL POSTGRADUATE SCHOOL MONTEREY CA CENTER FOR INFORMATION SYSTEMS SECURITY STUDIES AND RESEARCH
|
 | The Domain Name System (DNS) protocol was introduced to solve a naming problem in TCP/IP networking, namely, to provide a translation service of system names to network addresses (i.e., Internet Protocol (IP) addresses). The protocol was not developed with a requirement to support multilevel secure (MLS) networks. However, the Department of Defense (DoD) vision for the Global Information Grid (GIG) entails support for multilevel networks. In the future, DNS installations ... |
|
| MYSEA: The Monterey Security Architecture |
Jan 2009 |
11 pages |
| Authors:
Cynthia E Irvine; Thuy D Nguyen; David J Shifflett; Timothy E Levin; Jean Khosalim; Charles Prince; Paul C Clark; Mark Gondree; NAVAL POSTGRADUATE SCHOOL MONTEREY CA
|
| Mandated requirements to share information across different sensitivity domains necessitate the design of distributed architectures to enforce information flow policies while providing protection from malicious code and attacks devised by highly motivated adversaries. The MYSEA architecture uses component security services and mechanisms to extend and inter-operate with commodity PCs, commodity client software, applications, trusted components, and legacy single level networks, providing new capabilities for composing secure, distributed multilevel secure solutions. ... |
|
| Use of Trusted Software Modules for Emergency-Integrity Display |
01-Jun-2008 |
22 pages |
| Authors:
Timothy E Levin; Thuy D Nguyen; Paul C Clark; Cynthia E Irvine; David J Shifflett; Timothy M Vidas; NAVAL POSTGRADUATE SCHOOL MONTEREY CA DEPT OF COMPUTER SCIENCE
|
| This report provides summary of the interface, mechanisms and semantics for high integrity display of information in a secure computer system, based on the use of a high assurance separation kernel and trusted software modules in both the application domain and the trusted software domain. |
|
| Security Architecture for a Virtual Heterogeneous Machine |
Jan 1998 |
12 pages |
| Authors:
Roger Wright; David J Shifflett; Cynthia E Irvine; NAVAL POSTGRADUATE SCHOOL MONTEREY CA DEPT OF COMPUTER SCIENCE
|
| We describe security for a virtual heterogeneous machine (VHM). Our security architecture is based upon separation of services into four distinct domains. It is designed to take advantage of operating system support for domains, where available. We have chosen to use emerging public key technology as an interim solution to provide domain separation. A prototype demonstration of our architecture has been developed. |
|
Reports by Author
