Suchergebnisse

The objective of this research was to draw upon the rich body of knowledge that has been established for the construction of highly trustworthy IT systems. Based upon threat analyses, early and subsequent standards were established for trustworthy system construction. The objective of the standards has been to inform developers of highly critical systems of the requirements that must be met in order to address the subversion threat during the life cycle process. Unfortunately, the standards only state what must be done, but do not provide guidance on how to do it. In fact, since commercial vendors often develop such systems for the government, the life cycle processes for highly trustworthy systems have been proprietary. This research activity addresses that problem as it applies to machinery control subsystems. ; Prepared for United States Navy, OPNAV N2/N6 and funded in part by United States Navy, OPNAV N2/N6. ; Approved for public release; distribution is unlimited.

CyberCIEGE is a sophisticated network security simulation packaged as a video game and used by educators around the world to enhance information assurance education and training at universities, community colleges, within the DoD, and in other government agencies. The CyberCIEGE game engine was recently expanded to include Public Key Infrastructure (PKI) features including certification authorities, selection of installed roots and cross certification. CyberCIEGE Virtual Private Network (VPN) gateways, VPN clients and email clients were then extended to incorporate the new PKI features. CyberCIEGE PKI abstractions are described in terms of player configuration choices and the consequences of these choices on network management and vulnerabilities. The CyberCIEGE game engine modifications include modeling of chains of trust and risks of cross certification schemes. The benefits of these enhancements include coherent integration of identity management technologies, ranging from the human interface through to the supporting distributed infrastructure, into scenarios. Benefits also include support for recent new scenarios focused on the PKI infrastructure, identity management, or both; and the ability to tie both identity management and PKI to concepts of identification, authentication, provenance, and access control.

CyberCIEGE is a sophisticated network security simulation packaged as a video game and used by educators around the world to enhance information assurance education and training at universities, community colleges, within the DoD, and in other government agencies. The CyberCIEGE game engine was recently expanded to include Public Key Infrastructure (PKI) features including certification authorities, selection of installed roots and cross certification. CyberCIEGE Virtual Private Network (VPN) gateways, VPN clients and email clients were then extended to incorporate the new PKI features. CyberCIEGE PKI abstractions are described in terms of player configuration choices and the consequences of these choices on network management and vulnerabilities. The CyberCIEGE game engine modifications include modeling of chains of trust and risks of cross certification schemes. The benefits of these enhancements include coherent integration of identity management technologies, ranging from the human interface through to the supporting distributed infrastructure, into scenarios. Benefits also include support for recent new scenarios focused on the PKI infrastructure, identity management, or both; and the ability to tie both identity management and PKI to concepts of identification, authentication, provenance, and access control. ; These CyberCIEGE extensions were sponsored by the Biometrics Task Force. ; Approved for public release; distribution is unlimited.

The Center for the Information Systems Studies and Research (CISR) at the Naval Postgraduate School has established a broad program in computer and network security education. The program, founded on a core in traditional computer science, is extended by a progression of specialized courses and a broad set of information assurance research projects. A CISR objective has been improvement of information assurance education and training for the U.S. military and government. Pursuant to that objective, CISR is developing a computer simulation game, CyberCIEGE, to teach computer security principles. CyberCIEGE players construct computer networks and make choices affecting the ability of these networks and the game�s virtual users to protect valuable assets from attack by both vandals and well motivated professionals [1]. CyberCIEGE includes a language for expressing different security related scenarios. A central part of this language is an ability to express a variety of different information security policies. ; Approved for public release; distribution is unlimited.

The ability of spyware to circumvent common security practices, surreptitiously exporting confidential information to remote parties and illicitly consuming system resources, is a rising security concern in government, corporate, and home computing environments. While it is the common perception that spyware infection is the result of high risk Internet surfing behavior, our research shows main-stream web sites listed in popular search engines contribute to spyware infection irrespective of patch levels and despite �safe� Internet surfing practices. Experiments conducted in July of 2005 revealed the presence of spyware in several main-stream Internet sectors as evidenced in the considerable infection of both patched and unpatched Windows XP test beds. Although the experiment emulated conservative web surfing practices by not interacting with web page links, images, or banner advertisements, pyware infection of Internet Explorer based test beds occurred swiftly through cross-domain scripting and ActiveX exploits. As many as 71 different spyware programs were identified among 6 Internet sectors. Real estate and online ed web sites infected the test beds with, as many as 14 different spyware programs and one bank-related web site appeared to be the source of a resource consuming dialing program.Empirical analysis suggests that spyware infection via drive-by-download attacks has thus far been unabated by security patches or even prudent web surfing behavior. At least for the moment, it appears the choice of web browser applications is the single most effective measure in preventing spyware infection via drive-by-downloads

Good security is not intrusive and can be almost invisible to typical users, who are often unaware of or take it for granted. However, good security practice by user populations is a critical element of an organization's information assurance strategy. This is reflected in government information assurance teaching mandates such as DoD Directive 8570.1, which outlines objectives and requirements for information assurance (IA) education, training and awareness. Although mundane education, training and awareness programs may temporarily raise user interest, for many, mandatory education is considered a distracting waste of time. A new approach is needed to convey IA concepts that will engage the user's imagination. CyberCIEGE*+ is an innovative computer-based tool to teach information assurance concepts. The tool enhances information assurance education and training through the use of computer gaming techniques. In the CyberCIEGE virtual world, students spend virtual money to operate and defend their networks, and can watch the consequences of their choices, while under attack. This paper describes CyberCIEGE and will present ways in which this tool can be used to achieve Federal and DoD information assurance teaching objectives. ; Approved for public release; distribution is unlimited.

Good security is not intrusive and can be almost invisible to typical users, who are often unaware of or take it for granted. However, good security practice by user populations is a critical element of an organization's information assurance strategy. This is reflected in government information assurance teaching mandates such as DoD Directive 8570.1, which outlines objectives and requirements for information assurance (IA) education, training and awareness. Although mundane education, training and awareness programs may temporarily raise user interest, for many, mandatory education is considered a distracting waste of time. A new approach is needed to convey IA concepts that will engage the user's imagination. CyberCIEGE*+ is an innovative computer-based tool to teach information assurance concepts. The tool enhances information assurance education and training through the use of computer gaming techniques. In the CyberCIEGE virtual world, students spend virtual money to operate and defend their networks, and can watch the consequences of their choices, while under attack. This paper describes CyberCIEGE and will present ways in which this tool can be used to achieve Federal and DoD information assurance teaching objectives. ; Approved for public release; distribution is unlimited.

The Center for the Information Systems Studies and Research (CISR) at the Naval Postgraduate School has established a broad program in computer and network security education. The program, founded on a core in traditional computer science, is extended by a progression of specialized courses and a broad set of information assurance research projects. A CISR objective has been improvement of information assurance education and training for the U.S. military and government. Pursuant to that objective, CISR is developing a computer simulation game, CyberCIEGE, to teach computer security principles. CyberCIEGE players construct computer networks and make choices effecting the ability of these networks and the game's virtual users to protect valuable assets from attack by both vandals and well-motivated Professionals [1]. A key CyberCIEGE innovative is a scenario definition language that permits educators to generate many different security scenarios, each playable as an independent game. Every scenario includes a briefing that describes an enterprise (e.g., a business that depends on the secrecy of proprietary information) and gives the player information about what must be done to help make the enterprise successful. The scenario language is used to define a set of users and assets. Users are typically enterprise employees whose productive work makes money for the enterprise. Assets are various kinds of information required for user productivity. Example assets are secret formulas, accounting information, business plans, expense statements, and marketing material. Using the language, the scenario designer can define a number of different users who each need to access different assets in different ways to support enterprise productivity. These are user goals. The language can express the need for users to share assets and to access multiple different assets concurrently. Different assets have different values, and different users have different authorizations to access assets as defined by the enterprise security policy. Additionally, each asset has a value to attackers distinct from its value to the enterprise. This permits the scenario designer to express the motives that will drive virtual attackers in their attempts to compromise assets. The users, assets, user goals and enterprise security policy are established by the scenario designer using the language, and may not be changed by the player. Additionally, the scenario designer can define a set of computer components (e.g., workstation, servers, firewalls, etc.) that the player can purchase and configure to support their virtual users' goals. The scenario designer also defines the networks, (including the Internet), available to the player for interconnecting components. Furthermore the scenario designer can define a set of security personnel (e.g., guards) and support staff that the player can hire to help enforce physical security policies and maintain component and network configurations. The scenario designer specifies the costs of the various resources (e.g., workstation price, guard salary), and the effect of user goals on productivity and happiness. This results in the fundamental tension of computer security: Provide users with suitable sources to productively perform work while protecting the assets from security compromises in accordance with the enterprise security policy. ; Approved for public release; distribution is unlimited.

This document describes the Life Cycle Management Plan for the development of a high assurance secure product. A high assurance product is one for which its users have a high level of confidence that its security policies will be enforced continuously and correctly. Such products are constructed so that they can be analyzed for these characteristics. Lifecycle activities ensure that the product reflects the intent to ensure that the product is trustworthy and that vigorous efforts have been made to ensure the absence of unspecified functionality, whether accidental or intentional. The purpose of this plan is to provide the personnel policy necessary to protect the confidentiality and integrity of a product during the development and maintenance phases of its life cycle. Integrity is the primary concern of this plan, though confidentiality is not disregarded. ; Prepared for United States Navy, OPNAV N2/N6 and funded in part by United States Navy, OPNAV N2/N6. A portion of the material presented here is based upon work supported by the National Science Foundation under Grant No. CNS-0430566 and CNS-0430598. ; Approved for public release; distribution is unlimited.

by Paul C. Clark, Heather S. Gregg, with preface by Cynthia E. Irvine ; In February 2008 the Deputy Secretary of Defense signed a DoD Directive that established the Secretary of the Army as the DoD Executive Agent for DoD biometrics. The directive also indicated the importance of biometrics as a fully integrated enabling technology intended to support military operations. Even before that directive was signed, biometrics was being used extensively in a range of military operations. Despite its success, there has been little investigation of the potential use of biometrics in future operations. This report consists of two parts, which summarize the conditions under which biometric collection may occur in future Army deployments. Part I describes a range of biometric modalities and discusses technical factors associated with their use in various environmental contexts. Part II describes social and anthropological considerations that lead to effective biometric collection. ; Approved for public release; distribution is unlimited.