User Interface Multilevel Security Issues in a Transaction- Oriented Data Base Management System

摘要

The Department of Defense Advanced Research Projects Agency, the Navy and CINCPAC have agreed to carry out a Military Message Experiment to evaluate computer-aided message-handling systems in an operational military environment. Such systems are merely transaction-oriented data base management systems. Our role in the experiment is to investigate the security ramifications of such message-handling systems. This investigation includes the identification of primitives that are needed to ensure security, and the identification of the impacts that security imposes on the user interface. This report discusses several tradeoffs between secure implementation and the richness of the user interface.