| Schell, R., Tao, T. and Heckman M. (1985). Designing the GEMSOS security kernel for security and performance. In Proceedings of National Computer Security Conference, Gaithersburg. |
....The fundamental storage objects and the loci of mandatory access control are segments. GEMSOS segments are similar to those described in the Multics system [18] Associated with each segment is an immutable access class which reflects the sensitivity of the information stored in the segment [17]. A process, as the surrogate for the user, provides the vehicle by which the user can reference and access segments. Segments may be referenced once they are added to the virtual memory of the process, in GEMSOS, an action called making known a segment. When part of the virtual memory of the ....
....interpretively accessed named objects exported at the GEMSOS TCB interface used for mediating discretionary access. Each DACL contains a limited number of access control lists corresponding to the number of entries that can be created off of the DACL segment in the GEMSOS segment naming system [17]. The ACLs contained in DACLs are used to mediate discretionary access to DACLs and msegs which are associated with that particular DACL by virtue of being entries off of the DACL. Each DACL contains two modifiable templates which are used by the TCB to initialize the access control lists for ....
[Article contains additional citation context not shown here]
Roger Schell, T. F. Tao, and Mark Heckman. Designing the GEMSOS security kernel for security and performance. In Proceedings 8th DoD/NBS Computer Security Conference, pages 108--119, 1985.
....Features Our MLS TP system is targeted toward the Intel 80x86 series of microprocessors. This series of processors implements protection features, such as descriptor based segmented memory and multiple privilege levels [5, 4] that are extremely useful in creating a kernelized, MLS system [16, 17]. Memory is segmented and all access is via descriptors. Descriptors reside in two system descriptor tables; the local descriptor table (LDT) and the global descriptor table (GDT) A memory address consists of a selector and an offset. The selector is an index into one of the descriptor tables ....
....a process to be a program in execution that is completely described by its current (and single) point of execution and its address space. The current context of the process, found in the CPU state, describes the domain. It is a subset of the address space and may be represented by a ring number [18, 17]. We can see that a process may have several subjects, but only one subject within the process can be executing at a time. Subjects will be characterized by an access class that will be at or below the clearance of the user, i.e. some subset of the user s total set of authorizations. The ....
[Article contains additional citation context not shown here]
R. Schell, T. F. Tao, and M. Heckman. Designing the GEMSOS security kernel for security and performance. In Proceedings 8th DoD/NBS Computer Security Conference, pages 108--119, 1985.
No context found.
Schell, R., Tao, T. and Heckman M. (1985). Designing the GEMSOS security kernel for security and performance. In Proceedings of National Computer Security Conference, Gaithersburg.
No context found.
Schell, R., Tao, T. and Heckman M. (1985). Designing the GEMSOS security kernel for security and performance. In Proceedings of National Computer Security Conference, Gaithersburg.
No context found.
R.R. Schell, T.F. Tao, and M. Heckman. Designing the gemsos security kernel for security and performance. In Proceedings, 8th DoD/NBS Computer Security Conference, pages 108--119, Gaithersburg, Maryland, May 1985. IEEE Computer Society Press.
No context found.
Schell, R., Tao, T., and Heckman, M., "Designing the GEMSOS Security Kernel for Security and Performance," Proceedings of the National Computer Security Conference, October 1985.
No context found.
R. Schell, T. F. Tao, and M. Heckman. Designing the GEMSOS security kernel for security and performance. In Proceedings 8th DoD/NBS Computer Security Conference, pages 108--119, 1985.
No context found.
SCHE85 Schell, R. R., T. F. Tao, and M. Heckman, "Designing the GEMSOS Security Kernel for Security and Performance, 8th National Computer Security Conference, pp. 108119, NBS/NCSC, October 1985.
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC