Cross Domain and Multi-Level Security

Library
CC Testing Labs
CC Vendors
Research
FIPS 140 Crypto
Security Eng
Contract Vehicles
Clients
News
Careers
Contact Us

Multi-level systems are those that handle classified data at more than one level. They can be one of several types depending on architecture. These include Multi-Level Secure (MLS), Mulitple Security Levels (MSL), and Multiple Independent Levels of Security (MILS).

Designing a system to handle multiple levels of classified data that can be efficiently evaluated requires a thorough understanding of security design and development principles. But, high quality software development processes are not enough. Proving that a large complex system is secure enough to protect classified data can be prohibitively expensive unless it is carefully designed for efficient evaluation.

By organizing the security functionality into small, protected enclaves that control the security-critical resources, significant reductions can be achieved in evaluation costs--rendering practical an otherwise impractical process.

We know what requirements must be incorporated into product development that cannot be added later, when the product is complete.


© Copyright 2003-08, Ashton Security Laboratories, LLC