loading...
Asymmetric Isolation
San Diego California December 09-December 13
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CSAC.1996.56966812th Annual Computer Security Applica ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
J.A. Davidson, Norex Co., San Diego, CA, USA
Examines a surprisingly simple application of unidirectional security that supports essentially risk-free MLS (multi-level security). It is an unusual environment because security rules can be absolutely enforced. Not only security violations, but also multi-level communication handshaking and most downgrading is not simply disallowed, but prevented. Experiments conducted using hardware multiple single-level nodes interconnected by unidirectional links show how this environment can be a practical alternative to software-enforced security. When we can adapt to this environment, the benefits include near-absolute strength, high performance and low cost. It seems particularly applicable to legacy systems because it is almost independent of pre-existing hardware and software.
Index Terms:
security of data; asymmetric isolation; unidirectional security; risk-free multi-level security; absolute security rule enforcement; security violations; multi-level communication handshaking; downgrading; multiple single-level nodes; unidirectional links; hardware-enforced security; performance; cost; legacy systems; mandatory access control
Citation:
J.A. Davidson, "Asymmetric Isolation," acsac, pp.44, 12th Annual Computer Security Applications Conference (ACSAC '96), 1996
Usage of this product signifies your acceptance of the Terms of Use.