Using Web technologies in two MLS environments: a security analysis

This paper presents an extension to a Multi-Level Secure (MLS) data model that requires the classification of data and users into multiple security levels. In MLS systems, cover stories allow information provided to users at lower security levels to differ from information provided to users at higher security levels. Previous versions of the MLS model did not permit cover stories for key attributes, because the key is used to relate the various cover stories for a particular entity. We have extended the MLS model to include non-key related cover stories so that key attributes can also have different values at different security levels. In this paper we describe the necessary model changes and modifications to the relational algebra, which are required to implement non-key related cover stories. We demonstrate the improvements made by these changes and discuss the implementation and performance of a system based on the described concepts.

This paper presents the design and implementation features of Centralized Pervasive Computing Environment/Multilevel Security (CPCE/MLS), a multilevel security (MLS) system in pervasive computing environment deployed in Local area network (LAN) with a Mandatory Access Control (MAC) mechanism. By introducing the server-storage terminals and implementing the multilevel security access control mechanism based on the Bell---LaPadula model, process creation supervision, and an auditing mechanism, the CPCE/MLS system is able to provide the security guarantee of the whole computing environment. As such, each terminal is controlled under an integrated security policy. The performance test results show that the CPCE/MLS system, without optimization, generates great overhead but achieves significantly better performance after the cache mechanism is added in the monitor agent and in the hook driver. The system with the hook driver cache mechanism is able to achieve the 95.9% throughput of the native system with 8 K and 16 K requested data blocksize.

As the number of vendors offering multilevel secure (MLS) operating systems has grown, there have been a corresponding increase in the number of commercial-off-the-shelf (COTS) applications that are designed to incorporate MLS, particularly database management systems (DBMS). However, most existing DBMS applications were designed for non-MLS environments. End users have been reluctant to move to MLS applications due to the perceived difficulties of migrating from a non-MLS to an MLS environment, even though there is very little actual or documented experience in this process. This paper describes the migration of a production application from a non-MLS operating system to an MLS system for use in the Computer-aided Acquisition and Logistic Support (CALS) environment. The migration effort resulted in a demonstrable MLS application utilizing COTS MLS and non-MLS software. Although this paper describes the technical issues involved in the migration, many of the technical decisions were driven by non-technical factors. Therefore, in addition to describing the technical environment and actual migration, this paper discusses any technical decisions that were driven by nontechnical considerations. >

The new corporate approach to efficient processing and storage is migrating from in-house service-center services to the newly coined approach of Cloud Computing. This approach advocates thin clients and providing services by the service provider over time-shared resources. The concept is not new, however the implementation approach presents a strategic shift in the way organizations provision and manage their IT resources. The requirements on some of the data sets targeted to be run on the cloud vary depending on the data type, originator, user, and confidentiality level. Additionally, the systems that fuse such data would have to deal with the classifying the product and clearing the computing resources prior to allowing new application to be executed. This indicates that we could end up with a multi-level security system that needs to follow specific rules and can send the output to a protected network and systems in order not to have data spill or contaminated resources. The paper discusses these requirements and potential impact on the cloud architecture. Additionally, the paper discusses the unexpected advantages of the cloud framework providing a sophisticated environment for information sharing and data mining.

We present an approach to write web applications in the programming languages Haskell [8] and Curry [6]. The web applications we propose are directly based on the Hypertext Transfer Protocol (HTTP) – no additional protocol on top of HTTP is necessary. Although the main ideas are not new and already applied using other programming languages, we believe that features present in modern declarative languages – especially algebraic datatypes – serve well to represent resources on the web. 1 TRANSFER OF RESOURCE REPRESENTATIONS A resource is any piece of information named by a Uniform Resource Identifier (URI). A web application provides access to internally stored information over the Internet or accesses such information provided by other web applications. Usually, (a representation of) this information is transferred using the Hypertext Transfer Protocol (HTTP) [3] – possibly employing some protocol on top of it. Note that we do not primarily consider applications running inside a web browser like [4, 7, 9]. HTTP provides different methods to access resources from which the most important are the GET and the POST method. GET is used to retrieve some information, e.g., web browsers use GET to ask for the content of web pages. POST is used to send information to be processed by a server, e.g., entries in a web form can be sent to the server using POST. While processing the request, the server can update its internally stored information and usually sends back a result of this process. Web applications differ in their use of these two HTTP methods: RPC-style web applications are accessible through a single URI and communication is performed using the POST method. A representation of a procedure call is transferred to the server, which returns a representation of the result of this call as answer to the POST request. Note that both retrieval and update operations are performed using the POST method in RPC-style web applications and the interface of such applications is determined by the procedure calls that are understood by the server. Fielding [2] proposes another architectural style for web applications: He proposes to use the POST method only to update the internal state of the server and to use the GET method to purely retrieve information. Consequently, everything that should be available for retrieval by clients needs to be identified by an own URI. This is a big difference to RPC-style web applications that are usually accessible ?This work was partially supported by the German Research Council (DFG) grant Ha 2457/5-1. through a single URI. In the architectural style proposed by Fielding, a client sends an HTTP GET request to an URI to retrieve a representation of the resource identified by this URI corresponding to the current state of the server. To change this state, the client sends a POST request to the URI of the resource he wants to update. Fielding calls this architectural style Representational State Transfer (REST). The interface of a RESTful web application is given by the methods of HTTP and the URIs identifying the applications resources. In this work, we show how the interface given by the most important HTTP methods can be made available to Haskell or Curry programmers, hiding the details of HTTP communication.

Transaction-processing systems (TPS) are becoming increasingly more available as commercial products. However, the approaches to the issues associated with using TPS in multilevel secure environments are still in the research stage. In this article, we address the issues of multilevel security in distributed transaction-processing systems. A distributed transaction-processing system (DTPS) is a collection of a finite number of centralized transaction-processing systems connected by a computer network. Each of these transaction-processing systems is controlled by a software layer and can be accessed both remotely and locally. Properties of a DTPS, such as data replication, may have a substantial effect on the security of the system. The security policies and integrity constraints adopted at each site may result in global security having inconsistent states. We address the issues of achieving a multilevel secure DTPS, and discuss the security constraints and data replication.

This paper discusses the development of an accredited multilevel secure (MLS) system. The author reviews the methods and some problems in producing the Descriptive Top Level Specification (DTLS) and the attendant correspondences to the Formal Security Policy Model. Some of the problems encountered stem from the selection of a traditional but insufficient policy model. This paper identifies specific shortcomings of the policy model and recommends a different perspective to help alleviate such problems in the future. >

Consideration is given to the development of security policy models for networks which can operate in a multilevel security environment. An outline is presented of an abstract security policy model which addresses the access control and information flow requirements in a multilevel network. The network security policy is formulated by drawing as much parallel as possible with the computer security policy. The model is defined, and the associated security requirements are given. The model is used to prove that the security conditions are not violated by the defined network operations. >

Due to the complexity of the definition of the housing security object, the object recognition mostly depends on experience data, lacking theoretical support. The scientific method to define the income line of the housing security object is the key to ensure the appropriate level of housing security and the fairness of social welfare. This paper introduces several common methods to define the income line of housing security, and the main problem of these methods is not matched with the multi-level security system. For that, this paper introduces the method to define the income line of the housing security object based on income distribution function and the quantile theory, uses EViews to analyze house security object, and puts forward relevant suggestions for improving the management of the security object.

Threshold signature schemes are useful in MANET because of the mobility and weak connectivity. Meanwhile, order-specified multi-signature schemes are valuable in some multi-level security systems. To meet such kind of requirements, we proposed a secure threshold order-specified multi-signature scheme based on RSA in this paper. The scheme is designed based on a modified threshold RSA signature scheme and an order-specified. It has a certain extent exact security. Proof is given in the random oracle model and the computational and spatial complexity are presented at the end.

A queueing analysis is used to model the sequential screening of passengers at an airport security checkpoint. A multiobjective, nonlinear optimization problem is then formulated to balance the expected number of true alarms with the expected amount of time a passenger spends in the security system, thereby enhancing security operations, while also improving passenger throughput. Both multilevel security systems and those comprising primary and secondary levels of screening are analyzed to demonstrate the benefits from implementing each security system structure. Applying optimization techniques to the design of aviation passenger screening policies provides the means to both increase security and expedite screening by efficiently and effectively utilizing available screening resources.

The purpose of this report is to provide a baseline description of the state of multilevel processor/processing to the INFOSEC Research Council and at their discretion to the R&D community at large. From the information in the report, it is hoped that the members of the IRC will be aware of gaps in MLS research. A primary purpose is to bring IRC and the research community members up to date on what is happening in the MLS arena. The review will attempt to cover what MLS products are still available, and to identify companies who still offer MLS products. We have also attempted to identify requirements for MLS by interviewing senior officers of the Intelligence community as well as those elements of DoD and DOE who are or may be interested in procuring MLS products for various applications. The balance of the report consists of the following sections; a background review of the highlights of the developments of MLS, a quick summary of where we are today in terms of products, installations, and companies who are still in the business of supplying MLS systems [or who are developing MLS system], the requirements as expressed by senior members of the Intelligence community and DoD and DOE, issues and unmet R&D challenges surrounding MLS, and finally a set of recommended research topics.

This article provides a comprehensive analysis of the key risks associated with the operation of a crypto platform in the context of the transition to Web3 technology. The authors explore the activities of leading blockchain platforms such as Ethereum, Solana, Binance Smart Chain, Polkadot, Avalanche, Cosmos and Polygon, identifying the main types of risks that apply to the implementation of Web3 technology. The paper identifies threats associated with cryptocurrency volatility, regulatory uncertainty, cybersecurity, specific risks of decentralized finance (DeFi) and non-fungible tokens (NFTs), as well as scalability, accessibility and environmental issues. The authors analyzed the activities of the crypto platform and found that each platform has a unique structure and asset structure, which affects the nature of the risks. For example, Ethereum dominates the DeFi and NFT sectors, Solana is distinguished by its speed and low fees, Binance Smart Chain focuses on DeFi, and Polkadot and Cosmos are developing cross-chain technologies for interoperability. The main risks analyzed in the article include: Volatility of cryptocurrencies, which can increase financial instability; Cybersecurity, including hacking attacks and vulnerabilities of smart contracts; Regulatory uncertainty, which can hinder innovation and create legal conflicts; DeFi risks, such as errors in smart contracts, liquidation problems and systemic failures; NFT risks, in particular high market speculation and fraud risks; Scalability, including technical limitations and high fees; Complexity of use, which can limit the widespread adoption of Web3; Accessibility and inclusiveness, including unequal access to technologies; Energy consumption and environmental friendliness, which can affect the environment. To minimize these risks, the authors proposed a risk management strategy based on semi-fundamental principles: comprehensiveness, preventiveness, consistency, decentralization, transparency, security and interoperability. This strategy includes the introduction of modern analytical methods such as scenario analysis, machine learning, Value at Risk (VaR), Conditional VaR (CVaR), Monte Carlo models, multi-level security systems, bug bounty programs, transaction encryption, decentralized oracles, risk hedging using derivatives and RegTech solutions for regulatory compliance. For the effective implementation of the proposed strategy, a risk management roadmap was developed, which details the stages of risk identification, assessment, management and monitoring. This map includes specific tools for each stage, such as scenario analysis, AI analytics, blockchain scanners, VaR and CVaR models, attack models, stress testing, blockchain analytics, encryption, futures, options, RegTech, KPIs and behavioral models. The implementation of the proposed strategy will create a favorable environment for the reliable and sustainable development of Web3 technologies and the cryptocurrency market. Further research should be aimed at detailing platform-specific strategies and adapting them to the changing landscape of Web3.

Surveillance systems are yet to be integrated with health information systems for improving the health of pregnant mothers and their newborns, particularly in developing countries. This study aimed to develop a web-based epidemiological surveillance system for maternal and newborn health with integration of action-oriented responses and automatic data analysis with results presentations and to assess the system acceptance by nurses and doctors involved in various hospitals in southern Thailand. Freeware software and scripting languages were used. The system can be run on different platforms, and it is accessible via various electronic devices. Automatic data analysis with results presentations in the forms of graphs, tables and maps was part of the system. A multi-level security system was incorporated into the program. Most doctors and nurses involved in the study felt the system was easy to use and useful. This system can be integrated into country routine reporting system for monitoring maternal and newborn health and survival.

An important feature of the current stage of world development is the increase in turbulence and tension, the increase in threats and the actualization of security issues. The creation of military-political and economic associations of countries makes it possible to unite efforts in solving security problems and ensuring their development. One of such promising associations can be cooperation between the countries of the Baltic-Black Sea region. The purpose of the article is to assess the prerequisites and possibilities for creating the Baltic-Black Sea union, modeling its various combinations. The subject of the research is the model of the economic and military union of the countries of the Baltic-Black Sea region. The implementation of the analytic hierarchy process (AHP) method made it possible, using mathematical tools, to assess the conditions and probability of creating a BBS union, based on a multi-criteria analysis of the military, political or economic potential of states, and also to model options for its composition. Results. The idea of creating a BBS has a long history, which is due to a whole range of historical, geographical, political and military prerequisites. Ensuring the security of the BBS countries includes not only a military aspect, but also involves the development of economic cooperation and development. The composition of the BBS can vary considerably: from a basic number of core countries to a broad open participation of the countries of the Baltic, Black and Adriatic Sea regions and all neighboring countries. The Baltic-Black Sea cooperation can become a very powerful economic entity. Focusing on multilateral cooperation of partner countries in various fields will unite both resource-rich countries and fairly developed countries that have formed their specialization in the new conditions of the digital economy. Practical implications. Of particular importance is the creation of unified transport corridors between the northern and southern seas of the European continent. BBS can become part of a multi-stage and multi-level security system in Europe and in the world as a whole. The value/originality of this publication is due to the high relevance of the issue in the context of open military aggression and the need to find new mechanisms for ensuring collective security in Europe.