Mapping Trusted Systems Technologies to E-security Requirements

需要一种新的基于软件的方法，以强制性访问控制为基础，在国家和国际安全标准的有力指导下，简化对其信息基础设施的管理保护。这将以与目前国际上正在审议的可信系统技术相一致的安全定义工具包的形式。还没有开发出这样的可信系统来解决当前的商业IT产品环境。信息系统免受攻击和非法使用的安全构成了国家信息基础设施保护(NIIP)的重要组成部分，这是向更好的电子安全迈出的一步。现有的商业(不可信)操作系统缺乏电子安全的关键安全基础，使得电子应用程序容易被篡改和绕过，从而导致系统整体安全失效。

A new software based approach, strongly guided by national and international security standards based upon mandatory access control, is required to simplify for management the protection of their information infrastructure. This will be in the form of a security definition toolset aligned to trusted systems technologies currently under consideration internationally. No such trusted system has been developed to address current commercial IT product environments. The safety and security of information systems against attack and illicit usage form an essential component of ?National Information Infrastructure Protection (NIIP)?, a move to better ?e-security?. Existing commercial (untrusted) operating systems lack the critical security bases for e-security making e-applications vulnerable to tampering and bypass which can cause failures in overall system security.