Formal policies for trusted processes

Landauer, J.; Redmond, Tony; Benzel, Terry

doi:10.1109/csfw.1989.40584

Cited by 12 publications

(5 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The notion of trust has been around for many decades in different disciplines in different disguises. In security, the concept of "trusted systems" has been around explicitly at least since late 1970s [1,2]. Trust is used in the concept of convincing observers that a system is correct and secure.…”

Section: Introductionmentioning

confidence: 99%

General Methodology for Analysis and Modeling of Trust Relationships in Distributed Computing

Zhao¹,

Varadharajan²,

Bryan³

2006

JCP

View full text Add to dashboard Cite

Abstract-In this paper, we discuss a general methodology for analysis and modeling of trust relationships in distributed computing. We discuss the classification of trust relationships, categorize trust relationships into two layers and provide a hierarchy of trust relationships based on a formal definition of trust relationship. We provide guidelines for the analysis and modeling of trust relationships. We review operations on trust relationships and relative types of trust relationships in our previous work. We provide a set of definitions for the properties of direction and symmetry of trust relationships. In order to analyze and model the scope and diversity of trust relationship, we define trust scope label. We provide some example scenarios to illustrate the proposed definitions about properties of trust relationship. All the definitions about the properties of trust relationships are elements of the taxonomy framework of trust relationships. We discuss the lifecycle of trust relationships that includes the analysis and modeling of trust relationships, trust relationships at runtime, and change management of trust relationships. We propose a trust management architecture at high level to place the analysis and modeling of trust relationships under the background of trust management.Index Terms-trust relationship, properties of trust relationship, life cycle of trust relationship, trust management, distributed information system

show abstract

Section: Introductionmentioning

confidence: 99%

General Methodology for Analysis and Modeling of Trust Relationships in Distributed Computing

Zhao¹,

Varadharajan²,

Bryan³

2006

JCP

View full text Add to dashboard Cite

show abstract

“…Trust is a very important concept in today's distributed systems. In the security world, trust was first used in trusted systems (TCSEC, 1985) and trusted computing (Landauer et al, 1989). Marsh (Marsh, 1994) has tried to formalize trust as a computational concept.…”

Section: Introductionmentioning

confidence: 99%

Type and Scope of Trust Relationships in Collaborative Interactions in Distributed Environments

Zhao¹,

Varadharajan²,

Bryan³

2005

Proceedings of the Seventh International Conference on Enterprise Information Systems

View full text Add to dashboard Cite

In this paper, we consider the modelling of trust relationships in distributed systems based on a formal mathematical structure. We discuss different forms of trust. In particular, we address the base level authentication trust at the lower layer with a hierarchy of trust relationships at a higher level. Then we define and discuss trust direction and symmetric characteristics of trust for collaborative interactions in distributed environments. We define the trust scope label in order to describe the scope and diversity of trust relationship under our taxonomy framework. We illustrate the proposed definitions and properties of the trust relationships using example scenarios. The discussed trust types and properties will form part of an overall trust taxonomy framework and they can be used in the overall methodology of life cycle of trust relationships in distributed information systems that is currently in the process of development.

show abstract

“…These multi-level functions can be modeled by trusted subjects that have a label range spanning multiple nodes of the lattice. [47][10] [20] [40] It is a significant distinction that trusted subjects do not violate the security policy: rather their defined behavior is an explicit part of the security policy, as follows. The set of flows allowed by the system MLS security policy is the union of: (a) the flows allowed by the strict MLS policy; and (b) the set of flows defined to be allowed for the system's trusted subjects (here, called the relaxed MLS policy).…”

Section: Trusted Subjectsmentioning

confidence: 99%

Analysis of three multilevel security architectures

Levin

Irvine

Weissman

et al. 2007

Proceedings of the 2007 ACM Workshop on Computer Security Architecture

View full text Add to dashboard Cite

Various system architectures have been proposed for high assurance enforcement of multilevel security. This paper provides an analysis of the relative merits of three architectural types -one based on a security kernel, another based on a traditional separation kernel, and a third based on a least-privilege separation kernel. We introduce the Least Privilege architecture, which incorporates security features from the recent "Separation Kernel Protection Profile," and show how it can provide several unique aspects of security and assurance, although each architecture has advantages.

show abstract

Formal policies for trusted processes

Cited by 12 publications

References 5 publications

General Methodology for Analysis and Modeling of Trust Relationships in Distributed Computing

General Methodology for Analysis and Modeling of Trust Relationships in Distributed Computing

Type and Scope of Trust Relationships in Collaborative Interactions in Distributed Environments

Analysis of three multilevel security architectures

Contact Info

Product

Resources

About