The Monterey Security Architecture (MYSEA) combines untrusted commercial-off-the-shelf components with specialized high-assurance trusted components to provide a trusted multilevel secure environment. However, MYSEA currently lacks a means of providing remote access to data on the MYSEA server, a vital service for users in any client-server environment. Access and interaction with both public and private server-resident data that is constrained by the underlying discretionary and mandatory access control policy enforcement mechanisms of the MYSEA server is required. By enabling the use of WebDAV in MYSEA, this thesis provides a means for fulfilling the above requirement for secure remote access by creating a virtual web-based file system accessible from the MYSEA MLS network. This is accomplished by incorporating the mod_dav module into the Apache web server already installed on the MYSEA server. The use of a module required minimal changes to add the desired functionality. Integration of mod_dav is performed in three stages to aid in tracing the source of any errors. Functional and security testing is also performed, ensuring that the functional and security requirements are fulfilled. This research is relevant to the DoD Global Information Grid's vision of assured information sharing.
展开▼
