Toward a Medium-Robustness Separation Kernel Protection Profile

A protection profile for high-robustness separation kernels has recently been validated and several implementations are under development. However, medium-robustness separation kernel development efforts have no protection profile, although the US Government has published guidance for authoring such a profile. As a step toward a protection profile, a set of security requirements for medium-robustness separation kernels is proposed. These requirements result from an informal, yet principled, approach. By bracketing the problem with appropriate reference points and elaborating a method for interpolating the requirements both a measure of uniformity and a basis for further discussion are achieved. Our reference points include the high robustness protection profile, the existing medium robustness consistency instruction, and our familiarity with the nuances of separation kernels. This practitioner-oriented study is intended to advance the prevailing practices for commercial software devel...

• Type: Conference
• Year: 2007
• Where: ACSAC
• Authors: Rance J. DeLong, Thuy D. Nguyen, Cynthia E. Irvine, Timothy E. Levin
• Keywords: ACSAC 2007, Medium-robustness Separation Kernels, Protection Profile, Security Privacy, Separation Kernels