August 14, 2009

The MILS Component Integration Approach to Secure Information Sharing
- Carolyn Boettcher

Abstract

TTo achieve the vision of information superiority, secure and timely sharing of information is needed between geographically separated platforms and users. However, often the producers and consumers of the information, as well as the information itself are separated in different security domains. . A COTS marketplace of composable, high assurance components would not only make the vision of cross-domain information sharing more achievable, but could also help to make it much more affordable than is currently possible.

The MILS approach starts with system decomposition to isolate security-critical functionality into components that are as small and simple as possible, and whose security policies are likewise as simple as possible. Implementation of components is considered in a separate, second step, which includes the allocation of components to shared physical resources. A MILS system needs to provide assurance that this design and implementation strategy and, in particular, the separate sub-policies of its components and the resource-sharing properties of its physical subsystems, compose to guarantee the security policy required of the overall system. The presentation describes previously published results in MILS research and some of the remaining challenges.

Your Presenter: Carolyn Boettcher is a Senior Principal Multi-disciplinary Engineer at Raytheon Space and Airborne Systems with over 30 years experience in embedded software systems research and development for sensor applications. She is currently the Program Manager for the AFRL High Assurance Middleware for Embedded System program. Under HAMES, she is directing advanced research into formal mathematical models for integrating security components and deriving the assurance level of the resulting security architecture. Also under HAMES, she is responsible for the development of a protection profile for network stacks, such as IPv6.

Other research interests include the Object Management Group’s Unified Modeling Language and Model Driven Architecture and real-time, secure CORBA. She was a member of the industry/government team that defined the SysML profile for UML. She is a co- author on numerous publications and presentations at technical conferences, one of which won the best paper award at the 18th Digital Avionics System Conference.

Degree: MA, Mathematics, UCLA

If you wish to receive email flyers of future meetings please send a blank email, with a subject line of "subscribe" to: spin@ccpe.csulb.edu

Logistics

Location: Northrop Grumman E2 Presentation Center (in tall building off of Entrance 2), Redondo Beach, CA (formerly TRW) - 2299 Marine Ave., Redondo Beach, CA 90278
Directions: Take the 405 Inglewood exit (southbound it's the exit after Rosecrans East, northbound it's the exit just after Hawthorne) and go north on Inglewood Avenue (southbound, turn left at the end of the ramp, northbound, turn right). Turn left at Marine. Continue West under the freeway past the railroad tracks three lights to Simon Ramo Drive. E2 is on the tall white building to the LEFT, past the shorter presentation building. (See page 733 A5 of the Thomas Brothers Guide.)
Time: 9 a.m. - 12:00 noon
Admission: Free
Reservations: No reservations are necessary, except for Foreign Nationals.

Please Note: Foreign Nationals, including Northrop Grumman foreign employees, must contact Warren Scheinin (warren.scheinin@ngc.com) at least three (3) days before the meeting so NGC can process the paperwork for visits in a NGC building in accordance with Department of Defense regulations. The usual identification (passport, green card, student visa) will be necessary on the visit day.

SoCal SPIN is sponsored by:

Northrop Grumman Information Technology logo and link to home page

and co-sponsored by:

College of Continuing and Professional Education logo and link to home page