William Shockley, An Axiomatic Specification of Mandatory Security Policies (July 29, 1998)
Channel: securitylectures
Date: 2012-08-11

From the CISR video library (http://www.cisr.us)

William Shockley, Cyberscape 
An Axiomatic Specification of Mandatory Security Policies
July 29, 1998

at the
Naval Postgraduate School
(http://www.nps.edu)

ABSTRACT
A popular modeling approach for mandatory security policies is that introduced by Bell and LaPadula in terms of labeled subjects and objects, security states and transition operators. The only formal constraint on possible operators is in the form of a security state predicate to be inductively preserved by all operations. McLean has exposed the weakness of this approach by exhibiting systems that are obviously insecure with respect to information flow, yet preserve the security predicate. Inductive preservation of the security property is necessary, but not sufficient to guarantee that the operators are secure. The work reported here is intended to define rigorously a sufficient constraint on state transition operators. 

About William Shockley
Cyberscape Computers 

William R. Shockley is the owner of Cyberscape Computer Services. As a Senior Manager in Software Engineering at Digital Equipment Corporation, he was the lead architect of Transactional Message Queuing system and was responsible for security subsystem design and implementation for a TP-oriented system. There he was responsible for the corporate-level program in TP and database security. He contributed major sections to the Trusted Network and Trusted Database Interpretations of the TCSEC. He served as Director of Trusted Database Systems at Gemini Computers, Inc., where he was the lead engineer for the development of the Sea View Trusted DBMS, a landmark research project resulting in the design and demonstration of concept of a high assurance DBMS. 

He served as LCDR in the U.S. Navy and was a Project Officer for Shipboard Command and Control Systems and the Lead Engineer for the human interface system engineering of the Naval Advanced Combat Direction System.