[prev in list] [next in list] [prev in thread] [next in thread] 

List:       e-lang
Subject:    Re: [E-Lang] Migration and Una (was: E FAQ)
From:       Mark S Miller <markm () caplet ! com>
Date:       2001-10-01 6:40:53
[Download RAW message or body]

At 09:42 PM Sunday 9/30/01, Jonathan S. Shapiro wrote:
>> Btw, in light of previous discussions on e-lang, we may want to rephrase
>> this as "mutually reliant UTCBs".
>
>Actually, term "TCB" is now considered obsolete in the assurance community.
>The term du jour is now TSF, for Trusted Security Functions.

Is this just a relabelling, or does it have a different definition?  Is 
"TCB" considered obsolete for a good reason, or is it just fashion?  Should 
we now say UTSF for those parts of a system on which all the rest of the 
system necessarily relies on / is at the mercy of?  Or should we just coin a 
new term, like "reliance base" or something?


>It is also now clear to me why we had such trouble with the idea of nested
>TCBs. Neither the TCSEC nor Common Criteria language lends itself to
>object-oriented structure. The deeper I get into assurance the more
>convinced I become that fundamental work is needed in this area.

Sounds interesting.  What do you have in mind?

What should one read to learn the perspectives of the assurance community?



        Cheers,
        --MarkM

_______________________________________________
e-lang mailing list
e-lang@mail.eros-os.org
http://www.eros-os.org/mailman/listinfo/e-lang

[prev in list] [next in list] [prev in thread] [next in thread]