Security approach for rapid prototyping in multilevel secure systems

Abstract

Use of rapid prototyping t o develo Multilevel Secure (WS) systems requires that security [e included in the rapid prototyping process. The literature shows some examples of rapid prototyping applied to secure components. However little uidance is available for using a rapid prototypk to devt$op an MLS system consisting of multi le components, that can be accrehited in the D 8 D environment.A methodology ,is proposed for including securit in the rapid prototypmg process. In this, methodoigy assurance that security has been correctly incorporated. 1; provided by four foundation documents: the security concept of operations, the. security p l i c y the security architecture, and the certification an , accrkditation ,plan This methodology increases the probability of rapid prototype without serious security shortfalf?ducing a INTRODUCTIONStudies predicted that rapid prototyping would be a useful tool in the development of some Department of Defense (DOD) systems 111. Practice has shown that the benefits of rapid prototyping include reducing the overall cost and duration of the systems development process. This paper describes a situation where rapid prototyping of unclassified and classified system high systems has been so successful that the organization is now using rapid prototyping for implementation of a Multilevel Secure (MLS) system.