Exploiting the Dual Nature of Sensitivity Labels

One of the major goals of MITRE\´s Compartmented Mode Workstation (CWM) project is to assure that compartmented intelligence data processed on workstations has proper security labels associated, such that data is neither under-nor-overclassified. The CMW labeling strategy is different than that used in traditional secure systems (as suggested by the Department of Defense Trusted Computer System Evaluation Criteria), and revolves around associating two types of security information with objects: mandatory access control levels (MACLS), and sensitivity labels. MACLS are analogous to what are traditionally called security levels, and represent a "failsafe" level at which an object must be protected. Sensitivity labels accurately represent the classification of the data in the object, and also represent necessary handling restrictions. Supporting both MACLS and sensitivity labels for objects makes the system easier to use, helps prevent overclassification of data? and provides the capability of associating handling restrictions with data.