{"title":"Architecture for Multilevel Secure System Design","authors":"Yubing Duan, Zhiwei Cui, Yuan Liu","doi":"10.1109/ICCT.2018.8599974","DOIUrl":null,"url":null,"abstract":"A high assurance architecture is described for the protection of multilevel secure network, which provides a trusted environment for enforcing multilevel security policies. The presented architecture could prevent unauthorized users on the low side from retrieving sensitive information from the high side, as well as preventing the high side from being exposed to malicious code, such as virus sent from the low side that could damage critical information or system processes. In the simplest terms, the security risks in cross-domain service communication could be minimized.","PeriodicalId":244952,"journal":{"name":"2018 IEEE 18th International Conference on Communication Technology (ICCT)","volume":"441 1-2 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2018 IEEE 18th International Conference on Communication Technology (ICCT)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICCT.2018.8599974","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
Abstract
A high assurance architecture is described for the protection of multilevel secure network, which provides a trusted environment for enforcing multilevel security policies. The presented architecture could prevent unauthorized users on the low side from retrieving sensitive information from the high side, as well as preventing the high side from being exposed to malicious code, such as virus sent from the low side that could damage critical information or system processes. In the simplest terms, the security risks in cross-domain service communication could be minimized.