A practical approach to identifying storage and timing channels: Twenty years later

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2002-January, Issue , 2002, Pages 109-118

  Kemmerer, Richard A ^a  

^a University of California   (United States)

Author keywords

Access control; Communication channels; Communication system software; Computer science; Data security; Formal specifications; Information security; Protection; Secure storage; Timing

Indexed keywords

ACCESS CONTROL; COMMUNICATION CHANNELS (INFORMATION THEORY); COMPUTATIONAL LINGUISTICS; COMPUTER SCIENCE; COMPUTER SOFTWARE; DIGITAL STORAGE; FORMAL METHODS; FORMAL SPECIFICATION; LIFE CYCLE; NETWORK SECURITY; SECURITY OF DATA; SECURITY SYSTEMS; SPECIFICATION LANGUAGES; SPECIFICATIONS;

COMMUNICATION SYSTEM SOFTWARE; DISCRETIONARY ACCESS CONTROL; LANGUAGE IMPLEMENTATIONS; PROTECTION; SECURE STORAGE; SOFTWARE LIFE CYCLES; SYSTEM DESIGNERS; TIMING;

COMPUTER CONTROL SYSTEMS;

EID: 84948947266     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2002.1176284     Document Type: Conference Paper

References (19)

1. S. Ames and J. Millen. Interface verification for a security kernel. Technical report, Infotech International, Ltd., Maidenhead, Berkshire, UK, 1978
2. Minutes of the First Workshop on Covert Channel Analysis. IEEE Cipher, July 1990
3. Department of defense trusted computer system evaluation criteria. DoD standard, DOD 5200.28-STD, December 1983
4. R. Feiertag. A technique for proving specifications are multilevel secure. Technical Report CSL-109, SRI International, Menlo Park, CA, January 1980
5. G. Grossman. A practical executive for secure communications. In Proceedings 1982 Symposium on Security and Privacy, pages 144-155. IEEE, April 1982
6. J. Haigh, R. Kemmerer, J. McHugh, and W. Young. An experience using two covert channel analysis techniques on a real system design. IEEE Transactions on Software Engineering, SE-13(2), February 1987
7. J. Goguen and J. Meseguer. Security policies and security models. In Proceedings 1982 Symposium on Security and Privacy, pages 11-20. IEEE, April 1982
8. R. Kemmerer. Shared resource matrix methodology: A practical approach to identifying covert channels. Technical Report TRCS81-10, UCSB Computer Science Department, November 1981
9. R. Kemmerer. Shared resource matrix methodology: An approach to identifying storage and timing channels. ACM Transactions on Computer Systems, 1(3), August 1983
10. R. Kemmerer and P. Porras. Covert flow trees: A visual approach to analyzing covert storage channels. IEEE Transactions on Software Engineering, SE-17(11):1166-1185, November 1991
11. R. Kemmerer and T. Taylor. A modular covert channel analysis methodology for trusted DG/UX. In Proceedings of the Twelfth Annual Computer Security Applications Conference, pages 224-235, December 1996
12. C. Kline. Data security: Security, protection, confinement, covert channels. PhD thesis, UCLA, 1980
13. B. Lampson. A note on the confinement problem. Communications of the ACM, 16(1):613-615, 1973
14. S. Lipner. A comment on the confinement problem. In Proceedings of the Fifth Symposium on Operating Systems Principles, November 1975
15. R. Locasso, J. Scheid, V. Schorre, and P. Eggert. The Ina Jo specification language reference manual. Technical Report TM-6889/000/01, System Development Corp., Santa Monica, CA, November 1980
16. J. McHugh. Covert channel analysis, handbook for the computer security certification of trusted systems. Naval Research Laboratory Report, March 1993
17. J. Millen. Security kernel validation in practice. Communications of the ACM, 19:243-250, May 1976
18. J. Millen and G. Huff. Flow table generator. Technical Report WP-22554, The MITRE Corp., Bedford, MA, November 1979
19. M. Schaefer, M. Gold, B. Linde, and J. Scheid. Program confinement in KVM/370. In Proceedings of the 1977 Annual ACM Conference, pages 404-410. ACM, October 1977