DoD operates many system high enclaves with limited information flow between enclaves at different security levels. Too often, the result is duplication of operations and inconsistent and untimely data at different sites, which reduces the effectiveness of DoD decision support systems. This paper describes our solution to this problem as it arises in installations of the Joint Maritime Command Information System (JMCIS), an integrated C4I system. Our approach views databases in more classified enclaves as potential replica sites for data from less classified enclaves. Replicated data flows from lower enclaves to higher ones via one-way connections, yielding a high assurance MLS (multi-level secure) distributed system. The one-way connections are the only trusted components. This approach is based on our work an SINTRA (Secure Information Through Replicated Architecture), and applies generally to any collection of systems each running a database at system high. It complements and applies modern system design methods, which separate data management from data processing, and enables effective, low-cost MLS operation within that paradigm. In addition to describing current JMCIS installations and our architectural approach, the paper presents our approach for justifying a system's security and our use of formal methods to increase assurance that security requirements are met.


    Zugriff

    Zugriff über TIB

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Improving inter-enclave information flow for a secure strikes planning application


    Beteiligte:
    Froscher, J.N. (Autor:in) / Goldschlag, D.M. (Autor:in) / Kang, M.H. (Autor:in) / Landwehr, C.E. (Autor:in) / Moore, A.P. (Autor:in) / Moskowitz, I.S. (Autor:in) / Payne, C.N. (Autor:in)


    Erscheinungsdatum :

    1995


    Format / Umfang :

    10 Seiten, 24 Quellen



    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch




    COMMERCIAL SATELLITE OPERATIONS WITH SECURE ENCLAVE FOR PAYLOAD OPERATIONS

    ROBERT J WINIG / YI-FENG JAMES CHEN | Europäisches Patentamt | 2019

    Freier Zugriff


    First drive: 2008 Buick Enclave

    DeLorenzo,M. / General Motors,Buick Div.,US | Kraftfahrwesen | 2007



    NEPP Processor Enclave: Post COVID Update

    Edward J Wyrwas / Steve Guertin | NTRS | 2021