2026-09-18T23:02:30Z https://www.ideals.illinois.edu/oai-pmh

oai:www.ideals.illinois.edu:2142/16020 2023-07-10 col_2142_5131 col_2142_8888 com_2142_5130 com_2142_8887 com_2142_234

Nicol, David M. Nicol, David M. Sanders, William H. Adve, Vikram S. Vaidya, Nitin H. Okhravi, Hamed 2010-05-19T18:32:25Z 2010-05-19T18:32:25Z 2010-05-19T18:32:25Z 2010-5 High assurance MILS (multiple independent levels of security) and MLS (multilevel security) systems require strict limitation of the interactions between different security compartments based on a security policy. Virtualization can be used to provide a high degree of separation in such systems. This work provides a study of commercial-off-the-shelf (COTS) products to support high assurance MLS systems and designs a candidate architecture based on virtualization and trusted execution to provide strong compartmentalization. We then identify three major security problems in the candidate architecture: the lack of trust in the network, the problem of patch management, and untrusted graphics. We study and solve each of the security gaps in detail. More specifically, we design and evaluate a trusted network architecture for high assurance applications, evaluate an optimal pre-deployment testing time for effective patch management, and finally design, implement, and formally evaluate a trusted graphics subsystem. Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2010-01-28T14:51:27Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 Okhravi_Hamed.pdf: 1948405 bytes, checksum: e9d866154680baf9d55139dc74869449 (MD5) Made available in DSpace on 2010-05-19T18:32:25Z (GMT). No. of bitstreams: 2 Okhravi_Hamed.pdf: 1948405 bytes, checksum: e9d866154680baf9d55139dc74869449 (MD5) license.txt: 4063 bytes, checksum: 2a1c2d5f221359479fce282a77e75ea9 (MD5) http://hdl.handle.net/2142/16020 en Copyright 2010 Hamed Okhravi Trusted systems High assurance systems Multilevel security (MLS) Virtualization Trusted boot Trusted networks Patch management Trusted graphics Formal methods Trusted and high assurance systems Electrical & Computer Eng 1933 Electrical & Computer Engr 1200 University of Illinois at Urbana-Champaign Dissertation Ph.D. PHD:Electr & Computer Eng-UIUC 10KS1200PHD