DocumentCode
3332480
Title
Simple assured bastion hosts
Author
Cant, Chris ; Wiseman, Simon
Author_Institution
Defence Evaluation & Res. Agency, Malvern, UK
fYear
1997
fDate
8-12 Dec 1997
Firstpage
24
Lastpage
33
Abstract
It is shown how compartmented mode workstation (CMW) technology can be used as the basis of simple assured firewalls, where the vast majority of the evaluation effort required is reused from the evaluation of the CMW. The generic bastion host architecture described provides ITSEC E3 assurance that the unevaluated proxies cannot be bypassed. Assurance that the inappropriate export of information is prevented, can be gained by extending a trusted path export sanction from the user´s desktop to an evaluated release checker in the firewall
Keywords
authorisation; workstations; ITSEC E3 assurance; assured firewalls; bastion host architecture; compartmented mode workstation; evaluated release checker; evaluation effort reuse; information exporting; trusted path export sanction; unevaluated proxies; Communication system security; Concrete; Control systems; Counting circuits; Filters; Government; Internet; Labeling; Peer to peer computing; Workstations;
fLanguage
English
Publisher
ieee
Conference_Titel
Computer Security Applications Conference, 1997. Proceedings., 13th Annual
Conference_Location
San Diego, CA
ISSN
1063-9527
Print_ISBN
0-8186-8274-4
Type
conf
DOI
10.1109/CSAC.1997.646170
Filename
646170
Link To Document