{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,24]],"date-time":"2025-11-24T07:04:27Z","timestamp":1763967867246,"version":"3.28.0"},"reference-count":45,"publisher":"IEEE Comput. Soc","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1109\/csac.2002.1176285","type":"proceedings-article","created":{"date-parts":[[2003,6,26]],"date-time":"2003-06-26T11:35:00Z","timestamp":1056627300000},"page":"119-126","source":"Crossref","is-referenced-by-count":29,"title":["Thirty years later: lessons from the Multics security evaluation"],"prefix":"10.1109","author":[{"given":"P.A.","family":"Karger","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"R.R.","family":"Schell","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"70","article-title":"On Trusting Trust","volume":"7","author":"thompson","year":"1989","journal-title":"Unix Review"},{"key":"ref38","article-title":"Multics Security Kernel Top Level Specification","author":"stern","year":"1976","journal-title":"ESD-TR-76–368"},{"key":"ref33","article-title":"Top Level Specification of a Multics Security Kernel","volume":"wp 20810","author":"schiller","year":"1976"},{"key":"ref32","first-page":"108","article-title":"Designing the GEMSOS Security Kernel for Security and Performance","author":"schell","year":"1985","journal-title":"Proceedings of the 8th National Computer Security Conference"},{"key":"ref31","first-page":"16","article-title":"Computer security: the Achilles' heel of the electronic Air Force?","volume":"30","author":"schell","year":"1979","journal-title":"Air University Review"},{"key":"ref30","first-page":"22","article-title":"Some Multics Security Holes Which Were Closed by 6180 Hardware","author":"saltzer","year":"1977","journal-title":"Ancillary reports Kernel design Project"},{"key":"ref37","article-title":"Configuring the SELinux Policy","author":"smalley","year":"2002","journal-title":"NAI Labs Report #02–007"},{"key":"ref36","first-page":"1c","article-title":"New Software Quietly Diverts Sales Commissions","author":"schwartz","year":"2002","journal-title":"The New York Times"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/800214.806546"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/800213.806518"},{"key":"ref10","article-title":"A Preliminary Specification of a Multics Security Kernel","volume":"wp 20119","author":"biba","year":"1975"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/358198.358210"},{"key":"ref11","first-page":"47","article-title":"SE\/VMS: Implementing Mandatory Security in VAX\/VMS","author":"blotcky","year":"1986","journal-title":"Proceedings of the 9th National Computer Security Conference"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/2.889094"},{"key":"ref13","first-page":"53","volume":"6","author":"carr","year":"2000","journal-title":"The Hot Hand in the ASP Game"},{"journal-title":"Who says paranoia doesn't pay off? CNET News com","year":"2002","author":"cooper","key":"ref14"},{"key":"ref15","first-page":"68","volume":"15","author":"corbat\u00f3","year":"1969","journal-title":"PL\/I As a Tool for System Programming Datamation"},{"key":"ref16","first-page":"185","article-title":"Introduction and Overview of the Multics System","volume":"27","author":"corbat\u00f3","year":"1965","journal-title":"Fall Joint Computer Conference"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2000.821514"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1463891.1463917"},{"key":"ref19","article-title":"Trojan Horse OpenSSH Distribution","author":"dougherty","year":"2002","journal-title":"CERT® Advisory CA-2002–24"},{"key":"ref28","first-page":"1","article-title":"Repaired Security Bugs in Multics","author":"saltzer","year":"1977","journal-title":"Ancillary reports Kernel design Project"},{"journal-title":"Multilevel Computer Security Requirements of the World Wide Military Command and Control System (WWMCCS) LCD-78–106","year":"1978","key":"ref4"},{"key":"ref27","article-title":"Integrating Flexible Support for Security Policies into the Linux Operating System","author":"loscocco","year":"2001","journal-title":"Proceedings of the FREENIX Track 2001 USENIX Annual Technical Conference (FREENIX '01)"},{"journal-title":"Final Evaluation Report of Multics MR11 0 CSC-EPL-85\/003 (releasable only to US Government and their contractors)","year":"1985","key":"ref3"},{"key":"ref6","volume":"7","author":"one","year":"1996","journal-title":"Smashing the Stack for Fun and Profit"},{"key":"ref29","first-page":"28","article-title":"Some Recently Repaired Security Holes of Multics","author":"saltzer","year":"1977","journal-title":"Ancillary reports Kernel design Project"},{"journal-title":"CSC-STD004–85","article-title":"Technical Rationale Behind CSC-STD-003–85: Computer Security Requirements - Guidance for Applying the Department of Defense Trusted Computer System Evaluation Criteria in Specific Environments","year":"1985","key":"ref5"},{"key":"ref8","article-title":"Demonstration of the Subversion Threat: Facing a Critical Responsibility in the Defense of Cyberspace","author":"anderson","year":"2002","journal-title":"M S in Computer Science"},{"key":"ref7","first-page":"142","volume":"xc","author":"alexander","year":"1974","journal-title":"Waiting for the Great Computer Rip-off"},{"journal-title":"DoD 5200 28-STD","year":"1985","key":"ref2"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/32.55089"},{"journal-title":"Broward Officials Want Students to Try Hacking Mock Election","year":"2001","key":"ref1"},{"key":"ref20","first-page":"34","article-title":"Patterns of Security Violations: Multiple References to Argument","author":"forsdick","year":"1977","journal-title":"Ancillary reports Kernel design Project"},{"journal-title":"Multics Site History GM","year":"1998","author":"zemmin","key":"ref45"},{"journal-title":"Personal communication","year":"2002","author":"jaeger","key":"ref22"},{"key":"ref21","doi-asserted-by":"crossref","first-page":"83","DOI":"10.1145\/288090.288111","article-title":"A Security Architecture for Computational Grids","author":"foster","year":"1998","journal-title":"Proceedings of the 5th ACM Conference on Computer and Communications Security"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1992.213253"},{"key":"ref24","article-title":"Multics Security Evaluation: Vulnerability Analysis","volume":"ii","author":"karger","year":"1974","journal-title":"ESD-TR-74–193"},{"key":"ref41","first-page":"5","article-title":"A Census of Ring 0","author":"voydock","year":"1977","journal-title":"Ancillary reports Kernel design Project"},{"key":"ref23","first-page":"85","article-title":"Information Security: An Elusive Goal","author":"jelen","year":"1985","journal-title":"Program on Information Resources Policy"},{"key":"ref44","article-title":"Design for Multics Security Enhancements, ESD-TR-74–176","author":"whitmore","year":"1973","journal-title":"HQ Electronic Systems Division"},{"key":"ref26","first-page":"170","volume":"185","author":"logsdon","year":"1980","journal-title":"Computers & Social Controversy"},{"key":"ref43","first-page":"115","article-title":"Trapdoors and Trojan Horses","author":"whiteside","year":"1978","journal-title":"Computer Capers"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/32.106971"}],"event":{"name":"Eighteenth Annual Computer Security Applications Conference","acronym":"CSAC-02","location":"Las Vegas, NV, USA"},"container-title":["18th Annual Computer Security Applications Conference, 2002. Proceedings."],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/8386\/26404\/01176285.pdf?arnumber=1176285","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,6,8]],"date-time":"2021-06-08T04:50:53Z","timestamp":1623127853000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/1176285\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/csac.2002.1176285","relation":{},"subject":[]}}