+1 credit
| Version | Summary | Created by | Modification | Content Size | Created at | Operation |
|---|---|---|---|---|---|---|
| 1 | Dean Liu | -- | 2106 | 2022-09-27 02:54:42 |
Video Upload Options
In the security engineering subspecialty of computer science, a trusted system is one that is relied upon to a specified extent to enforce a specified security policy. This is equivalent to saying that a trusted system is one whose failure would break a security policy (if a policy exists that the system is trusted to enforce). The word "trust" is critical, as it does not carry the meaning that might be expected in everyday usage. A trusted system is one that the user feels safe to use, and trusts to perform tasks without secretly executing harmful or unauthorized programs; trusted computing refers to whether programs can trust the platform to be unmodified from the expected, and whether or not those programs are innocent ormalicious or whether they execute tasks that are undesired by the user. A trusted system can also be seen as a level-based security system where protection is provided and handle]]d according to different levels. This is commonly found in the military, where information is categorized as unclassified (U), confidential (C), Secret (S), Top secret (TS), and beyond. These also enforce the policies of no read-up and no write-down.
References
- Lunt, Teresa & Denning, Dorothy & R. Schell, Roger & Heckman, Mark & R. Shockley, William. (1990). The SeaView Security Model.. IEEE Trans. Software Eng.. 16. 593-607. 10.1109/SECPRI.1988.8114. (Source) https://www.researchgate.net/publication/220071090_The_SeaView_Security_Model
- The concept of trusted systems described here is discussed in Taipale, K.A. (2005). The Trusted Systems Problem: Security Envelopes, Statistical Threat Analysis, and the Presumption of Innocence, Homeland Security - Trends and Controversies, IEEE Intelligent Systems, Vol. 20 No. 5, pp. 80-83 (Sept./Oct. 2005). http://doi.ieeecomputersociety.org/10.1109/MIS.2005.89
- Feghhi, J. and P. Williams (1998) Trust Points, in Digital Certificates: Applied Internet Security. Addison-Wesley, ISBN:0-201-30980-7; Toward Real-World Models of Trust: Reliance on Received Information http://mcwg.org/mcg-mirror/trustdef.htm
- Trust as Qualified Reliance on Information, Part I, The COOK Report on Internet, Volume X, No. 10, January 2002, ISSN 1071-6327. http://nma.com/papers/it-trust-part1.pdf
- Gregory, John D. (1997). John D. Electronic Legal Records: Pretty Good Authentication? http://pages.ca.inter.net/~euclid1/call.html
- Huemer, L. (1998). Trust in business relations: Economic logic or social interaction? Umeå: Boréa. ISBN:91-89140-02-8. http://www.borea.nu/index.asp?PAGE=1&ARTICLE=1&saID=78
- Ivanov, K. (1972). Quality-control of information: On the concept of accuracy of information in data banks and in management information systems.The University of Stockholm and The Royal Institute of Technology. http://www.informatik.umu.se/~kivanov/diss-avh.html
- Daly, Christopher. (2004). A Trust Framework for the DoD Network-Centric Enterprise Services (NCES) Environment, IBM Corp., 2004. (Request from the IEEE Computer Society's ISSAA ). http://issaa.org/documents/
