Military Communications and Information Technology: A Trusted ...

More documents

Recommendations

Info

158 Military Communications and Information Technology... advantageous in general because of increased complexity, delay or other reasons. Here we can analyze whether the expected decrease in cross domain traffic is worth introducing a proxy or not. Figure 6. Information flow through a guard Figure 7. Information flow through a guard with proxy XI. Related work Several products for cross domain filtering exist. One application is controlling the settings of an integrated radio and crypto device which encrypts all user data before transmitting it. If a computer containing classified data is connected to the device, commands sent from the computer to the radio component, e.g. setting the frequency, have to bypass the encryption component. Filter products are available, which make sure that only specific commands may bypass it. There are also similar guard products for filtering IP network traffic crossing a boundary between two security domains. They use filters specific to protocol and application. Usually they offer customers to define filters according to their needs without mentioning details in promotional material.
Chapter 2: Communications and Information Technology for Trusted... 159 We are not aware of a common format to specify the desired behavior of a guard beyond definition of the message format for example by an XML schema language. We intend to look into ways to represent more complex requirements such as message rate dependent on message properties. XII. Summary and future work This paper examined how messages can be passed from a classified to an unclassified network in a CoNSIS network with minimal risk of leaking classified data. The introduction was followed by an overview of the CoNSIS architecture and general information on Multilevel Security. Then we described a guard for filtering data sent from a classified to an unclassified network for low message rate scenarios. It consists of a series of filters running on a separation kernel. Then we discussed effects of use of cryptographic protection of messages. This was followed by the concept of a proxy device in the unclassified network to limit the amount of messages having to pass the guard. Finally we provided some pointers to related work. Future work includes defining the behavior of a guard and a proxy with respect to a specific application such as a network management protocol. As mentioned in the related work section, choosing a clear representation of complex requirements regarding guard behavior is also a part of future work. References [1] J. Rushby, “The Design and Verification of Secure Systems,” in Eighth ACM Symposium on Operating System Principles (SOSP), Asilomar, CA, 1981. [2] L.J. La Padula and D.E. Bell, “Secure Computer Systems: A Mathematical Model,” The MITRE Corporation, Bedford, MA, USA, 1973. [3] CoNSIS, “System and Experimentation Architectures v1.0,” 2011. [4] S.J. Murdoch and S. Lewis, “Embedding Covert Channels into TCP/IP,” in Information Hiding: 7th International Workshop, volume 3727 of LNCS, Barcelona, Spain, Springer, 2005. [5] B. Pfitzmann, “Information Hiding Terminology – Results of an Informal Plenary Meeting and Additional Proposals,” in Proceedings of the First International Workshop on Information Hiding, Springer-Verlag, 1996. [6] R. Anderson, Security Engineering: A Guide to Building Dependable Distributed Systems – 2nd ed., Wiley, 2008. [7] V. Gligor, “A Guide to Understanding Covert Channel Analysis of Trusted Systems,” National Security Agency, Ft. George G. Meade, MD, USA, 1993.
Page 1 and 2:
Military Communications and Informa
Page 3 and 4:
Contents Foreword .................
Page 5:
Contents 5 Methodology for Gatherin
Page 8 and 9:
8 Military Communications and Infor
Page 11 and 12:
Building a Layered Enterprise Archi
Page 13 and 14:
Chapter 1: Concepts and Solutions f
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Applying NAF for Performance Analys
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Openness in Military Systems Jessic
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
The Concept of Integration Tool for
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
CFBLNet: A Coalition Capability Ena
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Selected Aspects of Effective RCIED
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81:
Page 84 and 85:
84 Military Communications and Info
Page 86 and 87:
Page 88 and 89:
Page 90 and 91:
Page 92 and 93:
Page 94 and 95:
Page 96 and 97:
Page 98 and 99:
Page 100 and 101:
100 Military Communications and Inf
Page 103:
Chapter 2 Communications and Inform
Page 106 and 107:
Page 108 and 109: 108 Military Communications and Inf
Page 149 and 150: Use of Cross Domain Guards for CoNS
Page 151 and 152: Chapter 2: Communications and Infor
Page 157: Chapter 2: Communications and Infor
Page 199: Chapter 3 Information Technology fo
Page 208 and 209:
Page 210 and 211:
Page 212 and 213:
Page 214 and 215:
Page 216 and 217:
Page 218 and 219:
Page 220 and 221:
Page 222 and 223:
Page 224 and 225:
Page 226 and 227:
Page 228 and 229:
Page 230 and 231:
Page 232 and 233:
Page 234 and 235:
Page 236 and 237:
Page 239 and 240:
Run-Time Ontology on the Basis of E
Page 241 and 242:
Chapter 3: Information Technology f
Page 243 and 244:
Page 245 and 246:
Page 247 and 248:
Page 249 and 250:
Page 251 and 252:
Page 253 and 254:
A Robust and Scalable Peer-to-Peer
Page 255 and 256:
Page 257 and 258:
Page 259 and 260:
Page 261 and 262:
Page 263 and 264:
Page 265 and 266:
Automatic Exploitation of Multiling
Page 267 and 268:
Page 269 and 270:
Page 271 and 272:
Page 273 and 274:
Page 275 and 276:
Page 277 and 278:
Page 279 and 280:
Page 281 and 282:
Information Fusion Under Network Co
Page 283 and 284:
Page 285 and 286:
Page 287 and 288:
Page 289 and 290:
Page 291 and 292:
Page 293:
Page 296 and 297:
Page 298 and 299:
Page 300 and 301:
Page 302 and 303:
Page 305 and 306:
Commanding Multi-Robot Systems with
Page 307 and 308:
Page 309 and 310:
Page 311 and 312:
Page 313 and 314:
Page 315 and 316:
Page 317 and 318:
Application of CID Server in Decisi
Page 319 and 320:
Page 321 and 322:
Page 323 and 324:
Page 325 and 326:
Page 327 and 328:
Page 329 and 330:
Page 331 and 332:
Managing Lessons Learnt from Daily
Page 333 and 334:
Page 335 and 336:
Page 337 and 338:
Page 339 and 340:
Page 341 and 342:
Page 343:
Page 347 and 348:
Federated Cyber Defence System - Ap
Page 349 and 350:
Chapter 4: Information Assurance &
Page 351 and 352:
Page 353 and 354:
Page 355 and 356:
Page 357:
Page 360 and 361:
Page 362 and 363:
Page 364 and 365:
Page 366 and 367:
Page 368 and 369:
Page 370 and 371:
Page 372 and 373:
Page 374 and 375:
Page 377 and 378:
Development of High Assurance Guard
Page 379 and 380:
Page 381 and 382:
Page 383 and 384:
Page 385 and 386:
Page 387 and 388:
Page 389 and 390:
Page 391 and 392:
Page 393 and 394:
Page 395 and 396:
Network Traffic Characteristics for
Page 397 and 398:
Page 399 and 400:
Page 401 and 402:
Page 403 and 404:
Page 405 and 406:
Page 407 and 408:
Page 409 and 410:
Page 411 and 412:
Page 413 and 414:
Page 415 and 416:
Methodology for Gathering Data Conc
Page 417 and 418:
Page 419 and 420:
Page 421 and 422:
Page 423 and 424:
Page 425 and 426:
Page 427 and 428:
Page 429:
Page 432 and 433:
Page 434 and 435:
Page 436 and 437:
Page 439 and 440:
On Multi-Level Secure Structured Co
Page 441 and 442:
Page 443 and 444:
Page 445 and 446:
Page 447 and 448:
Page 449 and 450:
Page 451 and 452:
Page 453 and 454:
Page 455 and 456:
Generation of Nonlinear Feedback Sh
Page 457 and 458:
Page 459 and 460:
Page 461 and 462:
Page 463:
Page 466 and 467:
Page 468 and 469:
Page 470 and 471:
Page 472 and 473:
Page 474 and 475:
Page 476 and 477:
Page 478 and 479:
Page 480 and 481:
Page 482 and 483:
Page 485 and 486:
Modern Usage of “Old” One-Time
Page 487 and 488:
Page 489 and 490:
Page 491 and 492:
Page 493 and 494:
Page 495:
Page 498 and 499:
Page 500 and 501:
Page 502 and 503:
Page 504 and 505:
Page 506 and 507:
Page 508 and 509:
Page 511 and 512:
A Abut Fatih 161 Akcaoglu Ismail 11
show all

Military Communications and Information Technology: A Trusted ...

Create successful ePaper yourself

Delete template?

Save as template?