Integrity Considerations for Secure Computer Systems

reportActive / Technical Report | Accession Number: ADA039324 | Open PDF

Abstract:

An integrity policy defines formal access constraints which, if effectively enforced, protect data from improper modification. The author identifies the integrity problems posed by a secure military computer utility. Integrity policies addressing these problems are developed and their effectiveness evaluated. A prototype secure computer utility, Multics, is then used as a testbed for the application of the developed access controls.

Author(s):
Biba, K. J.
Author Organization(s):
MITRE CORP BEDFORD MA
Descriptive Note:
Technical rept.,
Pagination:
0068

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release

RECORD

Collection: TR
Identifying Numbers
Report Number(s):
MTR-3153-REV-1, ESD-TR-76-372
Contract/Grant Number(s):
F19628-75-C-0001
Monitor Series:
TR-76-372, ESD
 Subject Terms
Joint Capability Areas:
JCA_8_Building Partnerships; JCA_5_Command and Control; JCA_8.1.3_Influence Adversary and Competitor Audiences; JCA_8.1_Communicate; JCA_5.2_Understand; JCA_5.2.3_Share Knowledge and Situational Awareness; JCA_4.6_Engineering; JCA_4.6.1_General Engineering; JCA_4.7.2_Installation Services; JCA_4.7_Base and Installations Support; JCA_6_Net Centric; JCA_6.4.1_Secure Information Exchange; JCA_8.2.3_Build the Capabilities and Capacities of Partners and Institutions; JCA_8.2_Shape; JCA_1_Force Support; JCA_5.3_Planning; JCA_1.2.6_Concepts; JCA_6.4_Information Assurance; JCA_1.2_Force Preparation; JCA_6.1.3_Switching and Routing; JCA_6.1_Information Transport
Modernization Areas:
Cyber
Communities of Interest:
Cyber
Descriptor(s):
*DATA MANAGEMENT, *DATA PROCESSING SECURITY, DATA BASES, DEPARTMENT OF DEFENSE, MILITARY REQUIREMENTS, CONTROL SYSTEMS, SYSTEMS ENGINEERING, NATIONAL SECURITY, VALIDATION, MODIFICATION, COMPUTER ARCHITECTURE, SHARING, PROTECTION, MULTIPLEXING, CLASSIFIED MATERIALS, SECURE COMMUNICATIONS, MULTIPLE ACCESS
Field(s)/Group(s):
Computer Hardware, Computer Systems Management and Standards
Keyword(s):
MULTICS system, Data integrity, Security kernels, Integrity, Computer utilities, Computer security
Report Date:
1977 Apr 01