A High Assurance Window System Prototype1

Epstein, Jeremy; McHugh, John; Orman, Hilarie; Pascale, Rita; Marmor-Squires, A.; Danner, B.; Martin, Charles R.; Branstad, Martha; Benson, G.; Rothnie, D.

doi:10.3233/jcs-1993-22-306

Cited by 10 publications

(7 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• Trusted X [4], [10] is a multi-level secure X window system. It encapsulates the untrusted functionality of an ordinary X server and polyinstantiates it for each security level.…”

Section: F Known Usesmentioning

confidence: 99%

See 1 more Smart Citation

A Pattern for Secure Graphical User Interface Systems

Fischer

Sadeghi

Winandy

2009

2009 20th International Workshop on Database and Expert Systems Application

View full text Add to dashboard Cite

Several aspects of secure operating systems have been analyzed and described as security patterns. However, existing patterns do not cover explicitly the secure interaction of users with the user interface of applications. Especially graphical user interfaces tend to get complex and vulnerable to spoofing and eavesdropping, e.g., due to key loggers or fake dialog windows. A secure user interface system has to provide a trusted path between the user and the application the user intends to use. The trusted path must be able to ensure integrity and confidentiality of the transmitted data, and must allow for the verification of the authenticity of the end points. We present a pattern for secure graphical user interface systems and evaluate its use in different implementations. This pattern shows how to fulfill the security requirements of a trusted path while preserving, in a policy-driven way, the flexibility that graphical user interfaces generally demand.

show abstract

“…• Trusted X [4], [10] is a multi-level secure X window system. It encapsulates the untrusted functionality of an ordinary X server and polyinstantiates it for each security level.…”

Section: F Known Usesmentioning

confidence: 99%

“…However, existing secure GUI systems [3], [4], [5], [6], [7], [8] have some elements in common on a conceptual level. We present a pattern for secure graphical user interface systems and evaluate its use in the different implementations.…”

Section: Introductionmentioning

confidence: 99%

A Pattern for Secure Graphical User Interface Systems

Fischer

Sadeghi

Winandy

2009

2009 20th International Workshop on Database and Expert Systems Application

View full text Add to dashboard Cite

show abstract

“…Such attacks can be prevented with an authorization policy enforcement, that determines the set of security-sensitive operations that an X client can perform on a resource. Indeed, there have been several efforts to secure the X server [7,10,20].…”

Section: The X11 Servermentioning

confidence: 99%

Mining Security-Sensitive Operations in Legacy Code Using Concept Analysis

Ganapathy¹,

King

Jaeger

et al. 2007

29th International Conference on Software Engineering (ICSE'07)

View full text Add to dashboard Cite

show abstract

“…There is a rich body of work to rectify this situation, and identify security requirements for, and create secure versions of the X server. Most of this work was carried out in the context of the Compartmented Mode Workstation [8,15,31], and the Trusted X projects [14,16], which built prototype windowing systems to meet the Trusted Computer System Evaluation Criteria. While these efforts focus on retrofitting the X server, there is also work on building X server-like window systems, with security proactively designed into the system [19,34].…”

Section: Related Workmentioning

confidence: 99%