The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments (1998)
Cached
Download Links
| Venue: | In Proceedings of the 21st National Information Systems Security Conference |
| Citations: | 69 - 4 self |
BibTeX
@INPROCEEDINGS{Loscocco98theinevitability,
author = {Peter A. Loscocco and Stephen D. Smalley and Patrick A. Muckelbauer and Ruth C. Taylor and S. Jeff Turner and John F. Farrell},
title = {The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments},
booktitle = {In Proceedings of the 21st National Information Systems Security Conference},
year = {1998},
pages = {303--314}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
National Security Agency Although public awareness of the need for security in computing systems is growing rapidly, current efforts to provide security are unlikely to succeed. Current security efforts suffer from the flawed assumption that adequate security can be provided in applications with the existing security mechanisms of mainstream operating systems. In reality, the need for secure operating systems is growing in today’s computing environment due to substantial increases in connectivity and data sharing. The goal of this paper is to motivate a renewed interest in secure operating systems so that future security efforts may build on a solid foundation. This paper identifies several secure operating system features which are lacking in mainstream operating systems, argues that these features are necessary to adequately protect general application-space security mechanisms, and provides concrete examples of how current security solutions are critically dependent on these features.
