Integrated mandatory access control for digital data

George Hsieh; Gregory Patrick; Keith Foster; Gerald Emamali; Lisa Marvel

doi:10.1117/12.777135

17 March 2008 Integrated mandatory access control for digital data

George Hsieh, Gregory Patrick, Keith Foster, Gerald Emamali, Lisa Marvel

Proceedings Volume 6973, Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security 2008; 697302 (2008) https://doi.org/10.1117/12.777135
Event: SPIE Defense and Security Symposium, 2008, Orlando, Florida, United States

Abstract

This paper presents an integrated mandatory access control (MAC) framework that incorporates MAC mechanisms at both operating system and application layers for digital data. The framework uses Security-Enhanced Linux (SELinux) as the foundation for MAC at the operating system layer. It uses XACML (eXtensible Access Control Markup Language) as the base mechanism for specifying and embedding information-layer MAC policies. This framework is designed to be general-purpose, flexible, and capable of providing fine-grained access control. This paper also describes a high-level architecture of a prototype being developed for the framework. One targeted application domain for this framework is information sharing and dissemination in a multi-level security environment.

Citation Download Citation

George Hsieh, Gregory Patrick, Keith Foster, Gerald Emamali, and Lisa Marvel "Integrated mandatory access control for digital data", Proc. SPIE 6973, Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security 2008, 697302 (17 March 2008); https://doi.org/10.1117/12.777135

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available