Protection and the control of information sharing in multics
Communications of the ACMPublished 1 July 1974Open access
Jerome H. Saltzer
Citations398
SJR quartileQ1
SJR score1.15
SNIP3.34
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
Five design principles help provide insight into the tradeoffs among different possible designs in the Multics system and several known weaknesses in the current protection mechanism design are discussed.
Abstract
The design of mechanisms to control the sharing of information in the Multics system is described. Five design principles help provide insight into the tradeoffs among different possible designs. The key mechanisms described include access control lists, hierarchical control of access specifications, identification and authentication of users, and primary memory protection. The paper ends with a discussion of several known weaknesses in the current protection mechanism design.
Keywords
Computer Science
Communications of the ACMHYDRA
491 Citations1974W. Wulf, Ellis Cohen +5 more
This paper describes the design philosophy of HYDRA—the kernel of an operating system for C.mmp, the Carnegie-Mellon Multi-Mini-Processor, through the introduction of a generalized notion of “resource,” both physical and virtual, called an “object.”
The multics system: an examination of its structure
387 Citations1972Elliott I. Organick
The author builds a picture of the life of a process in coexistence with other processes, and suggests ways to model or construct subsystems that are far more complex than could be implemented using predecessor computer facilities.
Communications of the ACMA hardware architecture for implementing protection rings
211 Citations1972Michael Schroeder, Jerome H. Saltzer
Hardware processor mechanisms for implementing concentric rings of protection that allow cross-ring calls and subsequent returns to occur without trapping to the supervisor are described.
Security controls in the ADEPT-50 time-sharing system
160 Citations1969Clark Weissman
The system described in this paper has not been approved by the Department of Defense for processing classified information and does not represent DOD policy regarding industrial application of time- or resource-sharing of EDP equipment.
Communications of the ACMThe Multics virtual memory
138 Citations1972Alain Bensoussan, C. T. Clingen +1 more
It is shown how the Multics software achieves the effect of a large segmented main memory through the use of the Honeywell 645 segmentation and paging hardware.
Communications of the ACMProtection in an information processing utility
119 Citations1968Robert M. Graham
This paper focuses on the problems of protecting both user and system information during the execution of a process, and gives special attention to this problem when shared procedures and data are permitted.
Multics
62 Citations1971F. J. Corbató, Jerome H. Saltzer +1 more
The development of the Multics system was undertaken as a cooperative effort involving the Bell Telephone Laboratories, the computer department of the General Electric Company, and Project MAC of M.I.T.
DSpace@MIT (Massachusetts Institute of Technology)COOPERATION OF MUTUALLY SUSPICIOUS SUBSYSTEMS IN A COMPUTER UTILITY
58 Citations1972Mark Schroeder
Practical protection mechanisms that allow mutually suspicious subsystems to cooperate in a single computation and still be protected from one another are described.
Security Controls for Computer Systems
52 Citations1970Willis H. Ware
With the advent of resource-sharing computer systems that distribute the capabilities and components of the machine configuration among several users or several tasks, a new dimension has been added to the problem of safeguarding computer-resident classified information.
Security considerations in a multi-programmed computer system
38 Citations1967Bernard Peters
There are several minimum requirements to establish an adequate security level for the software of a large multi-programmed system with remote terminals.
Protection systems and protection implementations
37 Citations1972Roger M. Needham
The paper outlines a system which is being developed to the point of hardware implementation in the Computer Laboratory, Cambridge, and outlines the potentialities and limitations of a variety of approaches to protection systems.
Address mapping and the control of access in an interactive computer
31 Citations1967David C. Evans, Jean Yves Leclerc
This paper describes a much improved mechanism for protection, address mapping, and subroutine linkage for an interactive computing system.
DSpace@MIT (Massachusetts Institute of Technology)Making computers keep secrets.
29 Citations1973Leo Joseph Rotenberg
ComputerPrivacy and Protection in Operating Systems
24 Citations1973D.K. Branstan
A workshop on privacy and protection in operating systems in Princeton, New Jersey, from June 12-14, 1972 was sponsored by the IEEE Committee on Operating Systems.
IEEE SpectrumIs your computer insecure?
21 Citations1972Charles W. Beardsley
Hardware and software techniques to prevent such disasters as leakage of private information, penetration of a computerized information center, and the alteration or destruction of a data base are surveyed in this article.
Hardware aspects of secure computing
20 Citations1970Lee M. Molho
It makes no sense to discuss software for privacy-preserving or secure time-shared computing without considering the hardware on which it is to run.
An implementation of a multiprocessing computer system
19 Citations1967William B. Ackerman, William W. Plummer
A PDP-1 computer was donated to the Electrical Engineering Department of the Massachusetts Institute of Technology in late 1961 and in May, 1963 the first time-sharing system was operational.
An experimental application of cryptography to a remotely accessed data system
14 Citations1972Joseph L. Smith, W. A. Notz +1 more
An experimental system has been developed which illustrates ways cryptography can be applied to certain data-security problems concerning remotely accessible data files, and how a more restricted kind of protection is afforded data stored in files.
Distributed communications
14 Citations1990Mike Kamrad, James H. Cross
This paper describes how Unisys has defined two Ada package specifications for inter-program communications that match the RTAW3 requirements and the motivation for their features.
The Formulary Model for Access Control and Privacy in Computer Systems
12 Citations2018Lance J. Hoffman
A model for engineering the user interface for large data base systems in order to maintain flexible access controls over sensitive data is presented, independent of both machine and data base structure, and is sufficiently modular to allow cost-effectiveness studies on access mechanisms.
A brief description of privacy measures in the multics operating system
12 Citations1967Edward L. Glaser
The Multics operating system at MIT has been used in the maintenance of information privacy in a multi-user, remote-access system for many years.
Enhancing Computer System Security
8 Citations1973Dennis Hollingworth
An attractive and cost-effective partial solution may reside in a different approach to the problem--implementation of an entrapment strategy--where the nature of the system/penetrator interaction is altered via introduction of counter-penetration elements into the system hardware and software.
The case for capability based computers (Extended Abstract)
6 Citations1973R. S. Fabry
Access control schemes using capabilities and capability -like notions are, as a whole, the most flexible and general schemes available.