Information Assurance Technologies for the Global Command and Control System (GCCS) Leading Edge Services (LES).

摘要

Information Assurance Technologies for the Global Command and Control System (GCCS) Leading Edge Services (LES) program was sponsored by DARPA's Information Systems Office. This report describes the different technology areas the program encompassed, summarized the major achievements of the program, and documents lessons learned and open issues. The technology areas were: (1) Security Architecture. The intent was to provide support for the transition of DARPA technology to operational users and on developing a system security and adversary model that could be used for architectural analysis of the system and information warfare simulations. (2) Distributed Object Security. The primary focus of the work was on CORBA related security with a goal to develop an integrated approach for enhancing the security of a CORBA system. To this end, a proxy for passing the CORBA network protocol, IIOP, through a firewall was developed and implemented on the Sidewinder firewall, and access control mechanisms were implemented to provide security checks on invocation of CORBA methods. (3) Single Sign-on Identification and Authentication. The goal was to develop a single sign-on authentication solution that would eliminate the need to multiple logins when using different applications. (4) Role Based Access Control (RBAC). This technology area used to RBAC model to provide a unified high-level view of the system for administering a system's security policy that would hide the details of the heterogeneous low-level policy and enforcement mechanisms from the security administrator.