From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,55958fd991db66fe X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2002-09-16 20:08:27 PST Path: archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!nntp.abs.net!newsfeed.cwix.com!news.binc.net!kilgallen From: Kilgallen@SpamCop.net (Larry Kilgallen) Newsgroups: comp.lang.ada Subject: Re: Advantage of XML based GUI? (was Re: Ada-inspired OS/Language) Date: 16 Sep 2002 22:07:19 -0600 Organization: Berbee Information Networks Corporation Message-ID: References: <4519e058.0209101828.cb5ff85@posting.google.com> <3d7f9d3f.920665532@news.cis.dfn.de> <3d80b566.992395741@news.cis.dfn.de> <3d813a2b.1026389832@news.cis.dfn.de> <3D841FA5.1020305@attbi.com> <3D844701.E0E56743@easystreet.com> <3d84f49b.1270762508@news.cis.dfn.de> In article <3d868ca3.16065380@news.cis.dfn.de>, nickroberts@blueyonder.co.uk (Nick Roberts) writes: > On 16 Sep 2002 09:26:53 -0600, Kilgallen@SpamCop.net (Larry Kilgallen) > strongly typed: > >>> As you will see from my other post, AdaOS will offer role-based security, >>> as well as mandatory (clearance levels). >> >>I presume that means for Confidentiality you plan to include the Bell and >>LaPadula compartments as well as levels. How about the Biba Integrity >>Extensions ? The code to add that is trivial, since it is the logical >>inverse of of Bell and LaPadula. > > Yes indeed, as per the TCSEC. (Essentially this is about the addition of > special categories to the basic levels.) I may even go a step further, and > add different confinement rule options to the categories. My emphasis on the Biba extensions is that technically they are not included in the TCSEC, given the US government emphasis on keeping the data secret but not on keeping the data correct (at the time the TCSEC was written anyway).