Affiliations: Department of Computer Science and Information Engineering, National Chiao Tung University, Hshinchu, Taiwan 30010, ROC
Note: [*] This work was supported in part by the National Science Council of Taiwan under contract NSC-85-2213-E-009-032.
Note: [**] Virgil D. Gligor is with the Department of Electrical Engineering, University of Maryland, College Park, Maryland, USA.
Abstract: In this paper we investigate the illicit means of leaking sensitive or private information in operating systems. The leakage cannot be eliminated either by the use of access control and authentication mechanisms or by administrative measures since unauthorized access need not be attempted. In order to resolve the problem, we designed an audit system which is able to detect the illicit leakage of information. This audit system consists of two major components: an enhanced audit-collection mechanism and an audit-analysis tool.
Keywords: Operating system security, multi-level secure systems, data transmission, information flow, audit collection, analysis
