Fifteen years after TX: A look back at high assurance multi-level secure windowing

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2006, Pages 301-320

  Epstein, Jeremy ^a  

^a Webmethods Inc

Author keywords

[No Author keywords available]

Indexed keywords

MULTI-LEVEL SECURE; TX;

CLASSIFICATION (OF INFORMATION); SOFTWARE ARCHITECTURE; WINDOWS OPERATING SYSTEM;

SECURITY OF DATA;

EID: 39049160207     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2006.28     Document Type: Conference Paper

References (27)

1. th Annual Computer Security Applications Conference, December 1996.
2. Secure Computer Systems: Unified Exposition and Multics Interpretation, MTR 2997, The MITRE Corporation, D. E. Bell, L. J. La Padula, July 1985.
3. CERT advisory CA-1993-17 xterm Logging Vulnerability, www.cert.org/advisories/CA-1993-17.html
4. CERT Advisory CA-1997-11 Vulnerability in libXt, www.cert.org/advisories/ CA-1997-11.html
5. R.D. Graubart, J.L. Berger, J.P.L., Woodward, Compartmented Mode Workstation Evaluation Criteria, Version 1, MTR 10953, The MITRE Corporation, Bedford, MA, June 1991 (also published by the Defense Intelligence Agency as document DDS-2600-6243-91) [Not in the public domain].
6. Security Requirements for System High and Compartmented Mode Workstations, DIA Document Number DDS-2600-5502-87, John P. L. Woodward (MITRE), November 1987.
7. Private conversation with George Dinolt, October 2, 1992.
8. Jeremy Epstein, "A Prototype for Trusted X Labeling Policies" in Proceedings of the Sixth Annual Computer Security Applications Conference, December 1990.
9. th National Computer Security Conference, October 1991.
10. Jeremy Epstein, et al, "A High Assurance Window System Prototype, in Journal of Computer Security, Vol. 2, No 2&3, 1993
11. Jeremy Epstein and Rita Pascale, "User Interface for a High Assurance Windowing System" in Proceedings of the Ninth Annual Security Applications Conference, December 1993.
12. th Annual National Information System Security Conference, October 1996.
13. N. Feske and C. Helmuth. "A Nitpicker's guide to a minimal complexity secure GUI", in Proceedings of the 21" Annual Computer Security Applications Conference, December 2005
14. Vinod Ganapathy, Trent Jaeger, and Somesh Jha, "Retrofitting Legacy Code for Authorization Policy Enforcement", in Proceedings of the 2005 IEEE Symposium on Security and Privacy, May 2005.
15. Mark Carson, Mudumbai Ranganathan, Janet Cugini, and Khalid Asad, Integrity Mechanism for Data Transfer in a Windowing System, U.S. Patent 5,590,266, issued December 31 1996.
16. Inter-Client Communication Conventions Manual, Version 1.0, MIT X Consortium Standard, 1989.
17. Jennifer Steiner, Clifford Newman, and Jeffrey Schiller, "Kerberos: An Authentication Service for Open Network Systems" in Proceedings of the Winter USENIX 1988 Conference.
18. Doug Kilpatrick, Wayne Salamon, and Chris Vance, "Securing the X Window System with SELinux", Technical Report 03-006, NAI Labs, March 2003. www.nsa.gov/selinux/papers/x11/t1.html
19. Richard Sherman, George Dinolt, and Frank Hubbard, Multilevel Secure Workstation, U.S. Patent 5,075,884, issued December 24, 1991.
20. th Annual National Computer Security Conference, October 1992.
21. OSF/Motif Programmer's Reference, Open Software Foundation, Prentice-Hall, 1990.
22. Rita Pascale and Jeremy Epstein "Virtual Window Systems: A New Approach to Supporting Concurrent Heterogeneous Windowing Systems" in Proceedings of the 1992 USENIX Summer Conference, July 1992.
23. X Window System Protocol, MIT X Consortium Standard, X Version 11, Release 4, Robert Scheifler, 1988.
24. th USENIX Security Symposium, August 2004
25. National Computer Security Center, Fort Meade, MD, Trusted Computer Systems Evaluation Criteria, DoD 5200.28--STD, December 1985.
26. Stephen Uhler, MGR ?C Language Application Interface, Bell Communications Research, 1988.
27. National Computer Security Center, Fort Meade, MD, Computer Security Requirements - Guidance for Applying the Department of Defense Trusted Computer System Evaluation Criteria in Specific Environments, CSC-STD-003-85, June 1985.