Design and administration of distributed and hierarchical information networks under partial orderings

doi:10.1016/0167-4048(87)90103-9

Computers & Security

Volume 6, Issue 3, June 1987, Pages 219-228

https://doi.org/10.1016/0167-4048(87)90103-9 Get rights and content

Abstract

In this paper, we extend previous results [1] in the protection and administration of information networks under partial orderings. We summarize previous results, and extend them to cover hierarchical networks. We consider distributed hierarchical administration, show a hierarchical network, and demonstrate a provably secure communications technique in which partial orderings are used to control flow, traffic analysis is minimized, local compromise does not cause global compromise, and distributed hierarchical administration works. We show means by which trusted and untrusted computing bases may be connected to form provably secure distributed information networks under partial orderings, and a risk analysis technique which takes advantage of the POset structure to reduce the complexity of analysis for these networks. We summarize results and propose further extensions of this work.

References (9)

F. Cohen, “Protection and Administration of Information Networks with Partial Orderings.” Computers and Security, Vol....
F. Cohen
Computer Viruses
(Jan. 1986)
D. Bell et al.
Secure Computer Systems: Mathematical Foundations and Model
(1973)
K. Biba
Integrity Considerations for Secure Computer Systems
(1977)

There are more references available in the full text version of this article.

Cited by (4)

A DOS-based POset implementation
1991, Computers and Security
In this paper, we describe and discuss a DOS-based POset (i.e. partially ordered set) implementation. We begin with a short review of previous results on POset-based protection. We then describe implementation details of POset-based protection under DOS. Next we discuss management tools used to implement and control the protection system. Then we describe the problems encountered in integration into existing DOS environments and how automation is used to resolve these problems and keep management complexity low. Finally, we summarize results, draw conclusions, and describe further work.
Two secure file servers
1988, Computers and Security
In this paper, we describe the design and implementation of a two secure file servers which allow a trusted computer network to be built from untrusted computing bases. We begin with a brief review of recent results in the use of partial orderings for protection and administration of information networks, and introduce limited functionality, trusted computing base file servers as a means for allowing restricted information flow. We show the means by which such a server may be made provably secure. We consider the practicality of implementation and describe two prototype implementations for personal computers. We then summarizes results and point out possible extensions of this work.
Designing provably correct information networks with digital diodes
1988, Computers and Security
In this paper, we extend previous results in the design and administration of information networks under partial orderings by introducing the “digital diode” which can be used as a basic component in the control of information flow. We summarize previous results and introduce the digital diode as a sufficient component to implement a general purpose flow control network. We prove that with this component, we can build any desired POset network and enforce its information flow properties. We show a design for a digital diode, demonstrate its correctness, show that any desired reliability of transmission can be attained, and that no covert channels are present. We then show variations of this scheme with well-defined and easily limited covert channels that allow end-to-end confirmation. We show means for audit, cryptographic security, and automated administrative assistance in digital diode networks, summarize results, draw conclusions, and propose further work.
On the implications of computer viruses and methods of defense
1988, Computers and Security
In this paper, we describe much of the previous and present work on computer viruses. We begin with a short history and bibliographic summary and then describe some of the major issues that arise in the study of computer viruses and in protecting against them. We discuss most of the lines of current research and some of their features and failings. We then introduce a method by which certain classes of systems may be used to provide limited protection from computer viruses and by which general purpose experiments in new protection mechanisms may be explored. Finally, we point out some of the social issues implied by viruses and the ramifications of our present social policies on the integrity of information residing in information systems.

View full text

Design and administration of distributed and hierarchical information networks under partial orderings

Abstract

Computer Viruses

Secure Computer Systems: Mathematical Foundations and Model

Integrity Considerations for Secure Computer Systems