A Security Domain Model for Implementing Trusted Subject Behaviors
نویسندگان
چکیده
Within a multilevel secure (MLS) system, trusted subjects are granted privileges to perform operations that are not possible by ordinary subjects controlled by mandatory access control (MAC) policy enforcement mechanisms. These subjects are trusted not to conduct malicious activity or degrade system security. We present a formal definition for trusted subject behaviors, which depends upon a representation of information flow and control dependencies generated during a program execution. We describe a security Domain Model (DM) designed in the Alloy specification language for conducting static analysis of programs to identify illicit information flows, access control flaws and covert channel vulnerabilities. The DM is compiled from a representation of a target program, written in an intermediate Implementation Modeling Language (IML), and a specification of the security policy written in Alloy. The Alloy Analyzer tool is used to perform static analysis of the DM to detect potential security policy violations in the target program. In particular, since the operating system upon which the trusted subject runs has limited ability to control its actions, static analysis of trusted subject operations can contribute to the security of the system.
منابع مشابه
Implementing the Message Filter Object - OrientedSecurity Model without Trusted
We propose a new architectural framework and implementation scheme, for the message lter multilevel security model for object-oriented databases. Major complications in implementing the model arise from the intrinsic nature of object-oriented computations which are abstract and often involve arbitrarily complex write-up actions. Dealing with the timing of write-up operations has broad implicati...
متن کاملImplementing the Message Filter Object-Oriented Security Model without Trusted Subjects
We propose a new architectural framework and implementation scheme, for the message lter multilevel security model for object-oriented databases. Major complications in implementing the model arise from the intrinsic nature of object-oriented computations which are abstract and often involve arbitrarily complex write-up actions. Dealing with the timing of write-up operations has broad implicati...
متن کاملSecure Implementation of Cryptographic Protocols: A Case Study of Mutual Distrust
Security protocols are critical for protecting modern communication infrastructures and are therefore subject to thorough analysis. However practical implementations of these protocols lack the same level of attention and thus may be more exposed to attacks. This paper discusses security assurance provided by security-typed languages when implementing cryptographic protocols. Our results are ba...
متن کاملMachine Learning Techniques for the Domain of Anomaly Detection for Computer Security
In this proposal, we examine the machine learning issues raised by the domain of anomaly detection for computer security. The anomaly detection task is to recognize the presence of an unusual (and potentially hazardous) state within the behaviors or activities of a computer user, system, or network with respect to some model of `normal' behavior which may be either hard-coded or learned from ob...
متن کاملGTrust: a group based trust model
Nowadays, the growth of virtual environments such as virtual organizations, social networks, and ubiquitous computing, has led to the adoption of trust concept. One of the methods of making trust in such environments is to use a long-term relationship with a trusted partner. The main problem of this kind of trust, which is based on personal experiences, is its limited domain. Moreover, both par...
متن کامل