Trusted and high assurance systems

High assurance MILS (multiple independent levels of security) and MLS (multilevel security) systems require strict limitation of the interactions between different security compartments based on a security policy. Virtualization can be used to provide a high degree of separation in such systems. This work provides a study of commercial-off-the-shelf (COTS) products to support high assurance MLS systems and designs a candidate architecture based on virtualization and trusted execution to provide strong compartmentalization. We then identify three major security problems in the candidate architecture: the lack of trust in the network, the problem of patch management, and untrusted graphics. We study and solve each of the security gaps in detail. More specifically, we design and evaluate a trusted network architecture for high assurance applications, evaluate an optimal pre-deployment testing time for effective patch management, and finally design, implement, and formally evaluate a trusted graphics subsystem.

Name thesis:degree_name

Ph.D.

Level thesis:degree_level

Dissertation

Discipline thesis:degree_discipline

Electrical & Computer Engr

Grantor

University of Illinois at Urbana-Champaign

Year dc:date

2010

Author dc:creator

• Okhravi, Hamed

Contributors dc:contributor

• Nicol, David M.
• Sanders, William H.
• Adve, Vikram S.
• Vaidya, Nitin H.

• Trusted systems
• High assurance systems
• Multilevel security (MLS)
• Virtualization
• Trusted boot
• Trusted networks
• Patch management
• Trusted graphics
• Formal methods

Statement dc:rights

• Copyright 2010 Hamed Okhravi

Language dc:language

en

Handle dc:identifier

http://hdl.handle.net/2142/16020

OAI identifier oai:identifier

oai:www.ideals.illinois.edu:2142/16020