CMW information labels

Abstract

Today, most major operating system vendors and OEMs are providing multilevel secure (MLS) operating systems. Many of these vendors, including Digital Equipment Corporation, Sun Microsystems, Hewlett Packard, and others, also incorporate Compartmented Mode Workstation (CMW) functionality [1]. CMW incorporates labeled security protection (e.g., U.S. Class B1 [2]) labeled X-windows, trusted networking, and many other important features that are critical to environments where automatic, high assurance data separation is required. In addition to the mandatory access control (MAC) sensitivity labels described in [2], CMWs also provide a second label component called the information label.