Integrating Security in a Large Distributed System

ACM Transactions on Computer Systems (TOCS)

Volumn 7, Issue 3, 1989, Pages 247-280

  Satyanarayanan, M ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Access lists; AFS; Andrew; Needham Schroeder; negative rights; orange book; protection domain; RPC; scalability; trust; UNIX

Indexed keywords

COMPUTERS, PERSONAL; CRYPTOGRAPHY;

ANDREW DISTRIBUTED COMPUTING ENVIRONMENT; COMPUTER SECURITY; TIME SHARING;

COMPUTER SYSTEMS, DIGITAL;

EID: 0024714097     PISSN: 07342071     EISSN: 15577333     Source Type: Journal    
DOI: 10.1145/65000.65002     Document Type: Article

References (38)

1. Accetta, M. J., Robertson, G. G., Satyanarayanan, M., and Thompson, M. The design of a network-based central file system. Tech. Rep. CMU-CS-80-134, Dept. of Computer Science, Carnegie Mellon Univ., Pittsburgh, Pa., Aug. 1980.
2. Advanced Micro Devices. MOS Microprocessors and Peripherals, 1985.
3. Birrell, A. D., Levin, R., Needham, R. M., and Schroeder, M. D. Grapevine: An exercise in distributed computing. Commun. ACM 25, 4 (Apr. 1982), 260–273.
4. Blrrell, A. D. Secure communication using remote procedure calls. ACM Trans. Comput. Syst. 3, 1 (Feb. 1985), 1–14.
5. Burrows, M. L., Abadi, M., and Needham, R. N. A logic of authentication. Tech. Rep. 39, Digital Equipment Corporation, Systems Research Center, Palo Alto, Calif., Feb. 1989.
6. Cheriton, D. R., and Zwaenepoel, W. The distributed V kernel and its performance for diskless workstations. In Proceedings of the 9th Symposium on Operating System Principles (Bretten Woods, N.H., Oct. 11-13, 1983). ACM, New York, 1983 pp. 129–140.
7. Crumley, P. TRADMYBD: Data Encryption Adapter Technical Reference Manual and Programmers’ Guide, Version 0.20. Tech. Rep. CMU-ITC-059, Information Technology Center, Carnegie Mellon Univ., Pittsburgh, Pa., Dec. 1986.
8. Dannenberg, R. B. Resource sharing in a network of personal computers. Ph.D. dissertation, Dept. of Computer Science, Carnegie Mellon Univ., 1982.
9. Diffie, W., and Hellman, M. E. Privacy and authentication: An introduction to cryptography. Proc. IEEE 67, 3 (Mar. 1979), 397–427.
10. DoD. Trusted Computer System Evaluation Criteria. CSC-STD-001-83, Dept. of Defense, Computer Security Center, 1985.
11. Fernandez, G., and Allen, L. Extending the UNIX protection model with access control lists. In Usenix Conference Proceedings (Summer, 1988).
12. Grampp, F. T., and Morris, R. H. Unix operating system security. Bell Lab. Tech. J. 63, 8 (Oct. 1984), 1649–1672.
13. Howard, J. H., Kazar, M. L., Menees, S. G., Nichols, D. A., Satyanarayanan, M., Sidebotham, R. N., and West, M. J. Scale and performance in a distributed file system. ACM Trans. Comput. Syst. 6, 1 (Feb. 1988), 51–81.
14. IBM. IBM 4700 Personal Computer Financial Security Adapter: Guide to Operations. No. 6024361, IBM Corp., 1985.
15. IBM. IBM 4700 Personal Computer Financial Security Adapter: Microcode Users Guide. No. 6024362, IBM Corp., 1985.
16. Jones, A. K. Protection in programmed systems. Ph.D. dissertation, Dept. of Computer Science, Carnegie Mellon Univ., Pittsburgh, Pa., 1973.
17. Jones, A. K., and Wulf, W. A. Towards the design of secure systems. Softw. Pract. Exper. 5 (1975), 321–336.
18. Lampson, B. W. A note on the confinement problem. Commun. ACM 16, 10 (Oct. 1973), 613–614.
19. Lazowska, E. D., Zahorjan, J., Cheriton, D. R., and Zwaenepoel, W. File access performance of diskless workstations. ACM Trans. Comput. Syst. 4, 3 (Aug. 1986), 238–268.
20. Meyer, C. H., and Matyas, S. M. Cryptography: A New Dimension in Computer Data Security. John Wiley, New York, 1982.
21. Morris, J. H., Satyanarayanan, M., Conner, M. H., Howard, J. H., Rosenthal, D. S., and Smith, F. D. Andrew: A distributed personal computing environment. Commun. ACM 29, 3 (Mar. 1986), 184–201.
22. Needham, R. M., and Schroeder, M. D. Using encryption for authentication in large networks of computers. Commun. ACM 21, 12 (Dec. 1978), 993–998.
23. Nichols, D. A. Using idle workstations in a shared computing environment. In Proceedings of the 11th ACM Symposium on Operating Systems Principles (Nov. 8-11, 1987). ACM, New York, 1987, pp. 5–12.
24. Rabin, M. O., and Tygar, J. D. An integrated toolkit for operating system security. Tech. Rep. TR-05-87, Aiken Computation Lab., Harvard Univ., Cambridge, Mass., May 1987.
25. Saltzer, J. H. Protection and the control of information sharing in Multics. Commun. ACM 17, 7 (July 1974), 388–402.
26. Satyanarayanan, M. Users, groups and access lists: An implementor's guide. Tech. Rep. CMU-ITC-84-005, Information Technology Center, Carnegie Mellon Univ., Pittsburgh, Pa., Aug. 1984.
27. Satyanarayanan, M., Howard, J. H., Nichols, D. N., Sidebotham, R. N., Spector, A. Z., and West, M. J. The ITC distributed file system: Principles and design. In Proceedings of the 10th ACM Symposium on Operating System Principles (Dec. 1-4, 1985). ACM, New York, 1985, pp. 35–50.
28. Satyanarayanan, M. RPC2 User Manual. Tech. Rep. CMU-ITC-84-038, Information Technology Center, Carnegie Mellon Univ., Pittsburgh, Pa., 1986 (revised).
29. Sidebotham, R. N. Volumes: The Andrew file system data structuring primitive. In European Unix User Group Conference Proceedings (Aug. 1986). Also available as Tech. Rep. CMU-ITC-053, Information Technology Center, Carnegie Mellon Univ., Pittsburgh, Pa., 1986.
30. Spector, A. Z., and Kazar, M. L. Wide area file service and the AFS experimental system. Unix Rev. 7, 3 (Mar. 1989).
31. Steiner, J. G., Neuman, C., and Schiller, J. I. Kerberos: An authentication service for open network systems. In Usenix Conference Proceedings (Winter, 1988).
32. Taylor, B. Secure networking in the Sun environment. In Usenix Conference Proceedings (Atlanta, Ga., Summer, 1986).
33. Taylor, B. A framework for network security. SunTechnology 1, 2 (Spring 1988).
34. U.S. Department of Commerce, N.B.S., Data Encryption Standard. 1977. Federal Information Processing Standards Publication, FIPS PUB 46.
35. Voydock, V. L., and Kent, S. T. Security mechanisms in high-level network protocols. ACM Comput. Surv. 15, 2 (June 1983), 135–171.
36. Western Digital Corp. Data Communication Products Handbook, 1985.
37. Wulf, W. A., Levin, R., and Harbison, S. P. HYDRA/C.mmp: An Experimental Computer System. McGraw-Hill, New York, 1981.
38. Zayas, E. R. Administrative cells: Proposal for cooperative Andrew file systems. Tech. Rep. CMU-ITC-060, Information Technology Center, Carnegie Mellon Univ., Pittsburgh, Pa., June, 1987.