Web Syndication in a Multilevel Security Environment

In this thesis, we demonstrate the feasibility of a novel multilevel web application that merges the ability to share sensitive information with cutting-edge Web 2.0 communication paradigms: we develop a multilevel web aggregation service, allowing web content at various classifications to be gathered together and browsed. The architecture supports read-down across subscriptions, supports receiving near-real-time delivery of new low web content to high subjects and demonstrates several thoughtful, ergonomic user interfaces relevant in a multilevel security context. The architecture was prototyped and evaluated using the current Monterey Security Architecture (MYSEA) research system.http://archive.org/details/websyndicationin1094538482Civilian, Naval Postgraduate SchoolApproved for public release; distribution is unlimited

Enabling XEP-0258 Security Labels in XMPP

Labeling makes data easier to process and search. This is vital while handling large amounts of data. By using labeling to indicate security classes, the number of different applications can be reduced as there would be no requirement to use separate application for each security class. The Extensible Messaging and Presence Protocol (XMPP) is an Instant Messaging (IM) protocol for Federated Networks. Extension XEP-0258 defines security labeling in XMPP, however not all systems support this draft standard. In this paper we present the processes and limitations of how different XMPP domains with different XMPP labeling capabilities can be joined together in a static or dynamic way. We have constructed an implementation to verify and validate the presented approach. In addition, we propose a way how non XEP-0258 applicable XMPP domains should be joined to mission networks, and hence security labeling would work more smoothly in the future. Finally, we show that the mangling of security labels does not significantly increase the anticipated delay of the communication.Peer reviewe