Abstract

Efforts to build "secure " computer systems have now been underway for more than a decade. Many designs have been proposed, some prototypes have been constructed, and a few systems are approaching the production stage. A small number of systems are even operating in what the Department of Defense calls the "multilevel " mode some

Citations

515	Secure computer system: unified exposition and MULTICS interpretation - Bell, LaPadula - 1976
478	A lattice model of secure information flow - DENNING - 1976
462	Cryptographyand Data Security - Denning - 1982
353	Secure computer systems: Mathematical foundations and model - Bell, LaPadula - 1973
348	Certification of programs for secure information flow - Denning, Denning - 1977
68	Secure Databases: Protection Against User Influence - Dobkin, Jones, et al. - 1979
66	A linear time algorithm for deciding subject security - Lipton, Snyder - 1977
61	Memoryless subsystems - Fenton - 1974
47	Information Transmission in Computational Systems - Cohen - 1977
41	A provably secure operating system: The system, its applications, and proofs - Neumann, Boyer, et al. - 1980
39	KSOS - The Design of a Secure Operating System - McCauley, Drongowski - 1979
35	Secure information flow in computer systems - Denning - 1975
32	Proving Multilevel Security of a System Design - Feiertag, Levitt, et al. - 1977
30	The foundations of a provably secure operating system (PSOS - Feiertag, Neumann - 1979
20	The enforcement of security policies for computation - Jones, Lipton - 1975
14	A Model for Verification of Data Security in Operating Systems - Popek, Farber - 1978
11	Ucla secure unix - Popek, Kampe, et al. - 1979
6	An Example of a Formal Flow Violation - Millen - 1978
4	Design of a message processing system for a multilevel secure environment - Ames, Oestreicher - 1978
3	A new model of computer security with integrity and aggregatmn consideratmns - Bonyun - 1978
2	Demonstrating security for trusted apphcatlons on a security kernel," MITRE - KEETON-WILLIAMS - 1972
2	Secure computer systems" Mathematical foundations," ESD-TR-73-278 - ESDAFSC, Bedford - 1981
2	Integrity considerations for secure computer systems," ESD-TR76-372, ESD/AFSC, Hanscom AFB - BIEA - 1977
2	The transfer of reformation and authomty in FEIE79 a protection system - BISHOP, SNYDER - 1979
2	Secure communica- FENT74 tions processor kernel software, detailed specification, part I, rev. D - BONNEAU - 1980
2	Lipton (Eds - Dobkin, Jones, et al. - 1978
2	DENN79a DENN79b GNOSS0 GOLD79 - DENNING - 1981
2	The tracker: A threat to statmtical database security - DENNING, DENNING, et al. - 1979
2	A validation technique for computer security based on the theory of constraints," ESD-TR-78-182 - FURTEK - 1978
2	Constraints and compromise," in Foundations of secure computatmn - FURTEK - 1978
2	Doing without values - FURTEK - 1979
2	Specification and verification of real-tn-ne, distributed systems using the theory of constraints - FURTEK - 1980
2	GNOSIS External Specifications," Tymshare - GOLD, LINDE, et al. - 1980
2	A security retrofit of GRAH72 - SCHAEFER, SCHEID, et al. - 1979
2	A model of a protected McCA79 data management system," ESD-TR-76289, ESD/AFSC, Hanscom AFB - GROHN - 1976
2	Secure data management system," RADC-TR-75-266, Rome Air Dev - HINKE, H, et al. - 1969
2	The enforcement of security policies for cornputation - JONES, LIPTON - 1978
2	Security kernel validation in practme - MILLEN - 1976
2	Department of the Navy - OPNAVINST - 1979
2	The MULTICS system" An exammatton of ~ts structure - ORGANICK - 1972
2	Access control models," ESD-TR-73-106 - POPEK - 1973
2	AND WALComputing Surveys, Vol 13, No 3 - POPEK, KAMPE, et al. - 1981
2	Implications of a vtrtual WALT74 memory mechanism for implementing protection m a family of operating systems - PRICE - 1973
2	A mechanism for mformation control m parallel systems," m Proc 7th Syrup. Operating Systems WALT75a Pnnc~ples - REITMAN - 1979
2	Preliminary notes on the WALT75b design of secure military computer systems," MCI-73-1, ESD/AFSC, Hanscom AFB - SCHELL, DOWNEY - 1973
2	Linear queries in statistical databases," ACM Trans Database Syst - SCHWARTZ, DENNING, et al. - 1979
2	AND Received November 1980, final revmlon accepted April 1981 Computing Surveys, Vol 13, No 3 - WALKER - 1981
2	Imtlal structured specifications for an uncompromlsable computer security system - WALTER, OGDEN, et al. - 1975
2	Military message experiment quick look report - WILSON, KALLANDER, et al. - 1979
2	The trusted function in secure decentralized processing - WITHINGTON - 1979