Multics security evaluation: Vulnerability analysis

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2002, Pages 127-146

  Karger, Paul A ^a   Schell, Roger R ^a  

^a Air Force Materiel Command   (United States)

Author keywords

Application software; Computer security; Control systems; Data security; Electrostatic discharge; Hardware; Information security; Military computing; Operating systems; Time sharing computer systems

Indexed keywords

APPLICATION PROGRAMS; COMPUTER CONTROL SYSTEMS; COMPUTER HARDWARE; CONTROL SYSTEMS; ELECTROSTATIC DEVICES; ELECTROSTATIC DISCHARGE; NETWORK SECURITY; SECURITY OF DATA; SECURITY SYSTEMS; TIME SHARING SYSTEMS;

AIR FORCE; MILITARY COMPUTING; MULTI-LEVEL SYSTEMS; SECURITY CONTROLS; SECURITY DESIGN; SECURITY EVALUATION; TIME-SHARING; VULNERABILITY ANALYSIS;

COMPUTER OPERATING SYSTEMS;

EID: 84948971509     PISSN: 10639527     EISSN: None     Source Type: Journal    
DOI: 10.1109/CSAC.2002.1176286     Document Type: Article

References (31)

1. ESD 1973 Computer Security Developments Summary, MCI-74-1, December 1973, HQ Electronic Systems Division: Hanscom AFB, MA
2. IBM System/360 Operating System Service Aids, GC28-6719-0, June 1970, IBM Corporation
3. Multics Users' Guide, AL40, Rev. 0, November 1973, Honeywell Information Systems, Inc.: Waltham, MA
4. The Multiplexed Information and Computing Service: Programmers' Manual, Revision 14, 30 September 1973, Massachusetts Institute of Technology and Honeywell Information Systems, Inc.: Cambridge, MA
5. Summary of the H6180 Processor, 22 May 1973, Information Processing Center, Massachusetts Institute of Technology: Cambridge, MA
6. System Programmers' Supplement to the Multiplexed Information and Computing Service: Programmers' Manual, 1973, Massachusetts Institute of Technology and Honeywell Information Systems, Inc.: Cambridge, MA
7. Techniques and Procedures for Implementing, Deactivating, Testing, and Evaluating Secure Resource-Sharing ADP Systems, DoD 5200.28-M, January 1973, Department of Defense: Washington, DC
8. WWMCCS Security System Test Plan, 23 May 1972, Joint Technical Support Activity, Defense Communications Agency: Washington, DC
9. Anderson, J.P., AF/ACS Computer Security Controls Study, ESD-TR-71-395, November 1971, James P. Anderson and Co., Fort Washington, PA, HQ Electronic Systems Division: Hanscom AFB, MA
10. Anderson, J.P., Computer Security Technology Planning Study, ESD-TR-73-51, Vols. I and II, October 1972, James P. Anderson and Co., Fort Washington, PA, HQ Electronic Systems Division: Hanscom AFB, MA. URL: http://csrc.nist.gov/publications/history/ande72.pdf
11. Andrews, J., M.L. Goudy, et al., Model 645 Processor Reference Manual, revision 4, 1 April 1971, Cambridge Information Systems Laboratory, Honeywell Information Systems, Inc.: Cambridge, MA
12. Bell, D.E. and L.J. LaPadula, Secure Computer Systems: A Mathematical Model, ESD-TR-73-278, Vol. II, MTR-2547, Vol. II, November 1973, The MITRE Corporation, Bedford, MA, HQ Electronic Systems Division: Hanscom AFB, MA
13. Bell, D.E. and L.J. LaPadula, Secure Computer Systems: Mathematical Foundations, ESD-TR-73-278, Vol. I, MTR-2547, Vol. I, November 1973, The MITRE Corporation, Bedford, MA, HQ Electronic Systems Division: Hanscom AFB, MA
14. Dennis, J.B. and E.C. Van Horn, Programming Semantics for Multiprogrammed Computations. Communications of the ACM, March 1966. 9(3): p. 143-155
15. Downey, P.J., Multics Security Evaluation: Password and File Encryption Techniques, ESD-TR-74-193, Vol. III, June 1977, HQ Electronic Systems Division: Hanscom AFB, MA
16. Goheen, S.M. and R.S. Fiske, OS/360 Computer Security Penetration Exercise, WP-4467, 16 October 1972, The MITRE Corporation: Bedford, MA
17. Graham, R.M., Protection in an Information Processing Utility. Comm. ACM, May 1968. 11(5): p. 365-369
18. Inglis, W.M., Security Problems in the WWMCCS GCOS System, Joint Technical Support Activity Operating System Technical Bulletin 730S-12, 2 August 1973, Defense Communications Agency: Washington, DC
19. Karger, P.A. and R.R. Schell, Multics Security Evaluation: Vulnerability Analysis, ESD-TR-74-193, Vol. II, June 1974, HQ Electronic Systems Division: Hanscom AFB, MA. URL: http://csrc.nist.gov/publications/history/karg74.pdf
20. Lipner, S.B., Computer Security Research and Development Requirements, MTP-142, February 1973, The MITRE Corporation: Bedford, MA
21. Lipner, S.B., Multics Security Evaluation: Results and Recommendations, ESD-TR-74-193, Vol. I, MTR-3267, October 1978, The MITRE Corporation, Bedford, MA, HQ Electronic Systems Division: Hanscom AFB, MA
22. Organick, E.I., The Multics System: An Examination of Its Structure. 1972, Cambridge, MA: The MIT Press
23. Price, W.R., Implications of a Virtual Memory Mechanism for Implementing Protection in a Family of Operating Systems, PhD thesis 1973, Carnegie-Mellon University: Pittsburgh, PA
24. Richardson, M.H. and J.V. Potter, Design of a Magnetic Card Modifiable Credential System Demonstration, MCI-73-3, December 1973, HQ Electronic Systems Division: Hanscom AFB, MA
25. Saltzer, J.H., Protection and the Control of Information Sharing in Multics. Comm. ACM, July 1974. 17(7): p. 388-402
26. Schell, R.R., P.J. Downey, et al., Preliminary Notes on the Design of Secure Military Computer Systems, January 1973, HQ Electronic Systems Division: Hanscom AFB, MA. URL: http://csrc.nist.gov/publications/history/sche73.pdf
27. Schiller, W.L., Design of a Security Kernel for the PDP-11/45, ESD-TR-73-294, MTR-2709, December 1973, The MITRE Corporation, Bedford, MA, HQ Electronic Systems Division: Hanscom AFB, MA
28. Schroeder, M.D. and J.H. Saltzer, A Hardware Architecture for Implementing Protection Rings. Comm. ACM, March 1972. 15(3): p. 157-170
29. Smith, L.A., Architectures for Secure Computing Systems, ESD-TR-75-51, MTR-2772, April 1975, The MITRE Corporation: Bedford, MA, HQ Electronic Systems Division, Hanscom AFB, MA
30. Walter, K.G., W.F. Ogden, et al., Primitive Models for Computer Security, ESD-TR-74-117, 23 January 1974, Case Western Reserve University, Cleveland, OH: HQ Electronic Systems Division, Hanscom AFB, MA
31. Weissman, C. Security Controls in the ADEPT-50 time sharing system. in Fall Joint Computer Conference. 1969, Vol. 35 AFIPS Conference Proceedings, AFIPS Press, Montvale, NJ. p. 119-133