KeySAFE

Here is a PostScript version. (40k)

For reader ease, footnotes have been converted to endnotes. If you would like further information about these documents, please contact Agorics, Inc.: info at agorics dot com.

SEC009-01
Preliminary Edition (March, 1989)

KeyKOS (R) is a Registered Trademark of Key Logic.

Copyright © Key Logic 1989.
All rights reserved.

Table of Contents

• Introduction

The KeyKOS/KeySAFE System Design

• Background
• Fundamental Architectural Design Concepts
  • Kernelized Operating System
  • Object Oriented System
  • Capability-based System
  • Single Level Store
• Multilevel Security Implementation Overview
  • Philosophy of Protection
  • Sensitivity Labels
  • KeyKOS Compartments
  • Subjects and Objects
• Trusted Computer Base Components
  • KeyKOS Kernel
  • Domains
  • Space Banks
  • Factories
  • Domain Creators
  • Reference Monitor
  • Receptionist
  • Device Drivers
  • Device Allocator
  • Audit Recorder
  • Journaling Facility
  • Special Administration and Operation Facilities
    • Joinuser
    • Tape Operator
    • Printer Operator

KeyKOS/KeySAFE and TCSEC B-level Requirements

• Security Policy
  • Discretionary Access Control
  • Object Reuse
  • Labels
    • Label Integrity
    • Exportation of Labeled Information
    • Exportation to Multilevel Devices
    • Exportation to Single-Level Devices
    • Labeling Human-Readable Output
    • Subject Sensitivity Labels
    • Device Labels
  • Mandatory Access Control
• Accountability
  • Identification and Authentication
    • Trusted Path
  • Audit
• Assurance
  • Operational Assurance
    • System Architecture
    • System Integrity
    • Covert Channel Analysis
    • Trusted Facility Management
    • Trusted Recovery
  • Life-Cycle Assurance
    • Security Testing
    • Design Specification and Verification
    • Configuration Management
• Documentation
  • Security Features User's Guide
  • Trusted Facility Manual
  • Test Documentation
  • Design Documentation

This page last updated 20 July 2001