Implementation and performance analysis of multilevel security system in pervasive computing environment

Authors:
Zhiyong Tan;Duo Liu;Xuejun Zhuo;Yiqi Dai;Laurence T. Yang
Affiliations:
Department of Computer Science and Technology, Tsinghua University, Beijing, China 100084;Department of Computer Science and Technology, Tsinghua University, Beijing, China 100084;Department of Computer Science and Technology, Tsinghua University, Beijing, China 100084;Department of Computer Science and Technology, Tsinghua University, Beijing, China 100084;Department of Computer Science, St Francis Xavier University, Antigonish, Canada B2G 2W5
Venue:
The Journal of Supercomputing
Year:
2013

Citing 6
Cited 0

A security model for military message systems

ACM Transactions on Computer Systems (TOCS)
Integrating Flexible Support for Security Policies into the Linux Operating System

Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference
Microsoft Windows Internals, Fourth Edition: Microsoft Windows Server(TM) 2003, Windows XP, and Windows 2000 (Pro-Developer)

Microsoft Windows Internals, Fourth Edition: Microsoft Windows Server(TM) 2003, Windows XP, and Windows 2000 (Pro-Developer)
A trust-based security system for ubiquitous and pervasive computing environments

Computer Communications
Towards security and privacy for pervasive computing

ISSS'02 Proceedings of the 2002 Mext-NSF-JSPS international conference on Software security: theories and systems
Transparent computing: a new paradigm for pervasive computing

UIC'06 Proceedings of the Third international conference on Ubiquitous Intelligence and Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents the design and implementation features of Centralized Pervasive Computing Environment/Multilevel Security (CPCE/MLS), a multilevel security (MLS) system in pervasive computing environment deployed in Local area network (LAN) with a Mandatory Access Control (MAC) mechanism. By introducing the server-storage terminals and implementing the multilevel security access control mechanism based on the Bell---LaPadula model, process creation supervision, and an auditing mechanism, the CPCE/MLS system is able to provide the security guarantee of the whole computing environment. As such, each terminal is controlled under an integrated security policy. The performance test results show that the CPCE/MLS system, without optimization, generates great overhead but achieves significantly better performance after the cache mechanism is added in the monitor agent and in the hook driver. The system with the hook driver cache mechanism is able to achieve the 95.9% throughput of the native system with 8 K and 16 K requested data blocksize.