Design of the EROS trusted window system

Proceedings of the 13th USENIX Security Symposium

Volumn , Issue , 2004, Pages

  Shapiro, Jonathan S ^a   Vanderburgh, John ^a   Northup, Eric ^a   Chizmadia, David ^b  

^a JOHNS HOPKINS UNIVERSITY   (United States)

^b Promia

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTING ENVIRONMENTS; COMPUTING SYSTEM; INFORMATION FLOWS; INTERPROCESS COMMUNICATION MECHANISM; MANDATORY ACCESS CONTROL; MICROSOFT WINDOWS; SENSITIVE INFORMATIONS; TRUST ASSUMPTIONS;

NETWORK SECURITY;

EID: 85084163031     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. M. D. Abrams. Renewed understanding of access control policies. In Proc. 16th National Computer Security Conference, pages 87-96, Oct. 1993.
2. Apple Computer. Inside Macintosh. Reading, Massachusetts, 1985.
3. Apple Computer. Quartz 2D Reference. Apple Computer, Inc., 2003.
4. J. L. Berger, J. Picciotto, J. P. L. Woodward, and P. T. Cummings. Compartmented mode workstation: Prototype highlights. IEEE Transactions on Software Engineering, 16(6):608-618, June 1990.
5. B. Bershad, T. Anderson, E. Lazowska, and H. Levy. Lightweight remote procedure call. In Proc. 12th Symposium on Operating Systems Principles, pages 102-113, Dec. 1989.
6. R. Cox, E. Grosse, R. Pike, D. Presotto, and S. Quinlan. Security in plan 9. In Proceedings of the 11th USENIX Security Symposium, pages 3-16, San Francisco, 2002.
7. U.S. Department of Defense Trusted Computer System Evaluation Criteria, 1985.
8. J. Epstein, J. McHugh, H. Orman, R. Pascale, A. Marmor-Squires, B. Dancer, C. R. Martin, M. Branstad, G. Benson, and D. Rothnie. A high-assurance window system prototype. Journal of Computer Security, 2(2):159-190, 1993.
9. J. Epstein and J. Picciotto. Trusting X: Issues in building Trusted X window systems -or- what's not trusted about X? In Proceedings of the 14th Annual National Computer Security Conference, Washington, DC, USA, Oct. 1991. A survey of the issues involved in building trusted X systems, especially of the multi-level secure variety.
10. J. Epstein, et al. A prototype B3 Trusted X Window System. In Proceedings of the Seventh Annual Computer Security Applications Conference, San Antonio, TX, USA, Dec. 1991. The architecture for TRW's high assurance multi-level secure X prototype.
11. E. W. Felten, D. Balfanz, D. Dean, and D. S. Wallach. Web spoofing: An internet con game. In 20th National Information Systems Security Conference, Baltimore, Maryland, Oct. 1997.
12. N. Feske and H. Haertig. DOpE - a window server for real-time and embedded systems. In Proc. 24th IEEE International Real-Time Systems Symposium, Cancun, Mexico, Dec. 2003.
13. M. Hohmuth and H. Härtig. Pragmatic nonblocking synchronization for real-time systems. In Proc. 2001 USENIX Annual Technical Conference, pages 217-230, Boston, MA., 2001.
14. Common Criteria for Information Technology Security. International Standards Organization, 1998. International Standard ISO/IS 15408, Final Committee Draft, version 2.0.
15. M. J. Kilgard, D. Blythe, and D. Hohn. System support for openGL direct rendering. In W. A. Davis and P. Prusinkiewicz, editors, Graphics Interface '95, pages 116-127. Canadian Human-Computer Communications Society, 1995.
16. L4 eXperimental reference manual, version X.2. Technical report, L4KA Team, University of Karlsruhe, 2001.
17. B. W. Lampson. A note on the confinement problem. Communications of the ACM, 16(10):613-615, 1973.
18. C. W. Mercer, S. Savage, and H. Tokuda. Processor capacity reserves: Operating system support for multimedia applications. In Proc. IEEE International Conference on Multimedia Computing and Systems, May 1994.
19. B. Pfitzmann, J. Riordan, C. Stüble, M. Waidner, and A. Weber. The PERSEUS system architecture. In D. Fox, M. Köhntopp, and A. Pfitzmann, editors, VIS 2001, Sicherheight in komplexen IT-Infrastrukturen, DuD Fachbeitrge, pages 1-18. Vieweg Verlag, 2001. Also available as IBM Research Report RZ 3335 (#93381).
20. J. Picciotto. Towards trusted cut and paste in the X Window System. In Proceedings of the Seventh Annual Computer Security Applications Conference, San Antonio, TX, USA, Dec. 1991. A discussion of the security problems associated with cut and paste in multi-level secure versions of X.
21. J. Picciotto and J. Epstein. A comparison of Trusted X security policies, architectures, and interoperability. In Proceedings of the Eighth Annual Computer Security Applications Conference, San Antonio, TX, USA, Dec. 1992. A survey of interoperability issues among CMWs and the TRW prototype.
22. R. Pike. The blit: A multiplexed graphics terminal. Bell Labs Tech. J., 63(8, part 2):1607-1631, Oct. 1984.
23. R. Pike. 8 1/2, the plan 9 window system. In Proceedings of the Summer 1991 USENIX Conference, pages 257-265, Nashville, 1991.
24. R. Pike, B. Locanthi, and J. Reiser. Hardware/software tradeoffs for bitmap graphics on the blit. Software - Practice and Experience, Jan. 1985.
25. T. Richardson, Q. Stafford-Fraser, K. R. Wood, and A. Hopper. Virtual network computing. IEEE Internet Computing, 2(1):33-38, 1998.
26. D. Rosenthal. Inter-client Communications Conventions Manual, version 2.0. X Consortium and Sun Microsystems, 1994.
27. R. W. Scheiffler and J. Gettys. X Window System. Digital Press, 3rd edition, 1992.
28. M. Segal and K. Akeley. The OpenGL Graphics System: A Specification, version 1.0. Silicon Graphics, Inc., 1993.
29. J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: A fast capability system. In Proc. 17th ACM Symposium on Operating Systems Principles, pages 170-185, Kiawah Island Resort, near Charleston, SC, USA, Dec. 1999. ACM.
30. J. S. Shapiro and S. Weber. Verifying the EROS confinement mechanism. In Proc. 2000 IEEE Symposium on Security and Privacy, pages 166-176, Oakland, CA, USA, 2000.
31. C. Thacker, E. M. McCreight, B. W. Lampson, R. F. Sproull, and D. Boggs. Alto: A personal computer. ACM Transactions on Computer Systems, 2(1), Feb. 1984.
32. J. Tygar and A. Whitten. www electronic commerce and Java Trojan horses. In Proc. 2nd USENIX Workshop on Electronic Commerce, pages 243-250, Oakland, CA, 1996.
33. J. P. L. Woodward. Security requirements for system high and compartmented mode workstations. Technical Report MTR 9992, Revision 1 (also published by the Defense Intelligence Agency as document DDS-2600-5502-87), The MITRE Corporation, Bedford, MA, USA, Nov. 1987. The original requirements for the CMW, including a description of what they expect for Trusted X.
34. Z. E. Ye and S. Smith. Trusted paths for browsers. In Proc. 11th USENIX Security Symposium, pages 263-279, 2002.
35. K.-P Yee. User interaction design for secure systems. In Proc. 4th International Conference on Information and Communications Security, pages 278-290, Dec. 2002.