NDLI: Reducing the risk of multi-level secure (MLS) workstations

Content Provider	IEEE Xplore Digital Library
Author	Klinker, J.E. Mihelcic, D.M.
Copyright Year	1997
Description	Author affiliation: Naval Res. Lab., Washington, DC, USA (Klinker, J.E.)
Abstract	Great interest exists within the military in using advances in multi-level secure (MLS) technology to improve operational capability. However, many practical operational applications demand more from the technology from an assurance standpoint than is currently available in most commercial MLS products. For example, following a strict Yellow Book definition for the separation of DoD secret to unclassified requires B3 level technology. The most usable commercial MLS products on the market today are targeted at the B1 level, a substantial reduction in assurance from the B3 mandated by the Yellow Book. However the Yellow Book was merely written as a guideline for applying MLS technology. While there is certainly some risk associated with using B1 level technology, there are practical measures that can be taken to substantially reduce the risk of using B1 level technology. This paper documents several techniques we have employed on several MLS installations in the Navy. The techniques are designed to reduce the overall risk of penetration on the systems. While many of the techniques can be used to improve the security of most Unix operating systems, they particularly reduce the operational risk of using an MLS operating system.
Starting Page	1422
Ending Page	1426
File Size	538746
Page Count	5
File Format	PDF
ISBN	0780342496
DOI	10.1109/MILCOM.1997.645002
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	1997-11-03
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Multilevel systems Workstations Operating systems Books Contracts Bismuth Guidelines Data security Access control Wide area networks
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

MLS file service for network data sharing

Secure applications need flexible operating systems

Using IPSec to Secure Multi-Level Data Classification in MLS Networks

A new MLS mandatory policy combining secrecy and integrity implemented in highly classified secure level OS

A survey of commercially available secure LAN products

Secure system architectures and integration

Observations on integrating multilevel secure components into system high distributed systems

Observations on integrating multilevel secure components into system high distributed systems

Secure compartmented data access over an untrusted network using a COTS-based architecture

Reducing the risk of multi-level secure (MLS) workstations

Similar Documents

MLS file service for network data sharing

Secure applications need flexible operating systems

Using IPSec to Secure Multi-Level Data Classification in MLS Networks

A new MLS mandatory policy combining secrecy and integrity implemented in highly classified secure level OS

A survey of commercially available secure LAN products

Secure system architectures and integration

Observations on integrating multilevel secure components into system high distributed systems

Observations on integrating multilevel secure components into system high distributed systems

Secure compartmented data access over an untrusted network using a COTS-based architecture

Reducing the risk of multi-level secure (MLS) workstations