A kernelized architecture for multilevel secure application policies

Abstract

Mandatory label-based policies may be used to support a wide-range of application security requirements. Labels encode the security state of system entities and the security policy specifies how these labels may change. Building on previous results, this paper develops a model for a kernelized framework for supporting these policies. The framework provides the basis for, what is essentially, an interpreter of multilevel programs: programs that manipulate multilevel label datastructures. This enables application functionality and security concerns to be developed separately, bringing with it the advantages of a separation of concerns paradigm.

Automating Security Configuration for the Grid

“…2 The KeyNote architecture provides a level of separation between the provision of security policy authorisation and application functionality. As a software engineering paradigm, techniques that support separation of concerns for security [6,17], synchronisation [25], and so forth are desirable since they lead to applications that are easier to develop, understand and maintain.…”

Secure Component Distribution Using WebCom

“…As a software engineering paradigm, techniques that support separation of concerns for security [2,5], synchronization [10], and so forth are desirable since they lead to applications that are easier to develop, understand and maintain.…”

GridAdmin: Decentralising Grid Administration Using Trust Management

“…As a software engineering paradigm, techniques that support separation of concerns for security [10], [13], synchronisation [14], and so forth are desirable since they lead to applications that are easier to develop, understand and maintain.…”