Operating System Structures to Support Security and Reliable Software

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	ANDE 72	ANVE~ON, J. Computer security technology planning study, Air Force Elect. Systems Dip., ESD- TR-73-51, Oct. 1972.
	BELL 73	BELL, D.; AND LAPADULA, L. Secure computer systems, Air Force Elect. Systems Dip., ESD-TR-73- 278, Nov. 1973.
	BRAN 73	BaANST~, D. K. "Privacy and ~omp rotection in operating systems," uter 6 (Jan. 1973), 43-46.
	COHE 75	Ellis Cohen , David Jefferson, Protection in the Hydra Operating System, Proceedings of the fifth ACM symposium on Operating systems principles, p.141-160, November 19-21, 1975, Austin, Texas, United States
	CONW 72	R. W. Conway , W. L. Maxwell , H. L. Morgan, On the implementation of security measures in information systems, Communications of the ACM, v.15 n.4, p.211-220, April 1972 [doi>10.1145/361284.361287]
	COSS 74	COSSeRAT, D.C. "A data model based on the capabilityprotection mechanism" in Proc. IRIA Internatl. Workshop on Protection in Operating Systems," 1974 Institut de Recherche d'Informatique et d'Automatique, France, 35-54.
	DAHL 68	Ole-Johan Dahl, SIMULA 67 common base language, (Norwegian Computing Center. Publication), 1968
	DENN 66	Jack B. Dennis , Earl C. Van Horn, Programming semantics for multiprogrammed computations, Communications of the ACM, v.9 n.3, p.143-155, March 1966 [doi>10.1145/365230.365252]
	DIJK 68	Edsger W. Dijkstra, The structure of the “THE”-multiprogramming system, Communications of the ACM, v.11 n.5, p.341-346, May 1968 [doi>10.1145/363095.363143]
	DIJK 72	DX#KSTRA, E. W. "Notes on structured programming," in Structured programming, O. -J. Dahl, E. W. Dijkstra, C. A. R. Hoare, (Eds.), Academic Press, New York, 1972.
	ENGL 72	ENGLAND, D.M. "Architectural features of System 250," in Proc. Internatl. Switching Symposium, Cambridge, Mass. 1972.
	ENGL 74	ENOLANV, D. M. "Capability concept mechanism and structure in System 250," in Proc. IRIA Internatl. Workshop on Protectwn in Operating Systems, 1974 Instirut de Recherche d'Informatique et de Automatique, France, 63-82.
	FABR 68	FABRY, R. S. "Preliminary description of a supervisor for a machine oriented around capabilities," ICR Quarlerly Report 18 Univ. of Chicago, Chicago, Ill.: 1968.
	FABR 73	R. S. Fabry, Dynamic verification of operating system decisions, Communications of the ACM, v.16 n.11, p.659-668, Nov. 1973 [doi>10.1145/355611.362535]
	FABR 74	R. S. Fabry, Capability-based addressing, Communications of the ACM, v.17 n.7, p.403-412, July 1974 [doi>10.1145/361011.361070]
	FERR 74	FERRIE, J.; KAISER, D.; LAN- cIhux, D.; AND MARTIN, B. "An extensible structure for protected systems design," in Proc. IRIA Internatl. Workshop on Proteclion in Operating Syslems, 1974 Institut de Recherche de Informatique et d'Automatic~ue, France.
	GRAH 72	GRAHAM, G. ~.; AND DENNING, P.J. "Protection--principle and practice," in Proc. 197~ AFIPS Spring Jr. Computer Conf. Vol. 40, AFIPS Press, Montvale, N. J., 1972 p. 417-424.
	GRAY 72	GRAY, J.; LAMPSON, B. W.; LIND- SAY, B.; AND STURGIS, H. The control structure of an operating system, Research Report, IBM Watson Research Center, Yorktown Heights, N. Y., July 1972.
	HOAR 72	HOARE, C. A.R., "Notes on data structuring," Structured programm~ng, O.-J. Dahl, E. W. Dijkstra, C. A. R. Hoare, (Eds.), Academic Press, New York 1972.
	HOAR 74	C. A. R. Hoare, Monitors: an operating system structuring concept, Communications of the ACM, v.17 n.10, p.549-557, Oct. 1974 [doi>10.1145/355620.361161]
	HOFF 71	I'IOFFMAN L J., "The formulary model for access control," in Proc. 1971 A FIPS Fall jr. Computer Conf., Vol. 39, AFIPS Press, Montvale, NJ.., 1971, pp. 587-601.
	JONE 73	Anita Katherine Jones, Protection in programmed systems., 1973
	KNUT 69	Donald E. Knuth, The art of computer programming, volume 2 (3rd ed.): seminumerical algorithms, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1997
	LAMP 69	LAMPSON, B. W. "Dynamic protection structures," in Proc. 1969 AFIPS Fall Jt. Computer Conf., Vol. 35, AFIPS Press, Montvale, N. J., 1969 pp. 27-38.
	LAMP 71	LAMPSON, B. W. "Protection," in Proc. F~fth Annual Princeton Conf. on Information Sczences and Systems, 1971, pp. 437-443. Reprinted zn A CM Operating Systems Review (Jan. 1974).
	LAMP 73	Butler W. Lampson, A note on the confinement problem, Communications of the ACM, v.16 n.10, p.613-615, Oct. 1973 [doi>10.1145/362375.362389]
	LAMP 76	Butler W. Lampson , Howard E. Sturgis, Reflections on an operating system design, Communications of the ACM, v.19 n.5, p.251-265, May 1976 [doi>10.1145/360051.360074]
	LIND 76	Theodore A. Linden, The use of abstract data types to simplify program modifications, Proceedings of the 1976 conference on Data : Abstraction, definition and structure, p.12-23, March 22-24, 1976, Salt Lake City, Utah, United States
	LIPN 74	LIPNER, S., (Chm.), "A panel session-- security kernels," in Proc. 1974 AFIPS National Computer Conf., Vol. 43, AFIPS Press, Montvale, N. J., pp. 993- 999.
	LIPN 75	Steven B. Lipner, A comment on the confinement problem, Proceedings of the fifth ACM symposium on Operating systems principles, p.192-196, November 19-21, 1975, Austin, Texas, United States
	LISK 74	Barbara Liskov , Stephen Zilles, Programming with abstract data types, ACM SIGPLAN Notices, v.9 n.4, p.50-59, April 1974
	LISK 75	LISKOV, B. ; AND ZILLES, S. "Specification techniques for data abstractions," IEEE Trans. on Software Engineemng 1, 1 (March 1975), 7-18.
	LOND 76	LONDON, R. L.; WULF, W. A.; AND SHAw, M. Abstraction and verification in Alphard: A symbol table example, Tech. Report, Carnegie- Mellon Univ., Pittsburgh, Pa., 1976.
	MORR 73	James H. Morris, Jr., Protection in programming languages, Communications of the ACM, v.16 n.1, p.15-21, Jan. 1973 [doi>10.1145/361932.361937]
	NEED 72	NEEDHAM, R. "Protection systems and protection implementations," in Proc. 1972 AFIPS Fall Jr. Computer Conf. Vol. 41, AFIPS Press, Montvale, N. J., pp. 571- 578.
	NEED 74	NEEDHAM, R. M.; AND WALKER, R. D.H. "Protection and process management in the CAP com- ~t uter," in Proc. IRIA Internatl. orkshop on Protectwn in Operating Systems, Institut de Recherche d'Informatique et d'Automatique, France, 1974, pp. 155- 160.
	NEUM 74	NEUMANN, P. G., FABRY, n. S.; LEVITT, K. N.; ROBINSON, L., AND WENSLEY, J. H. "Oil the design of a provably secure operating system," in Proc. IRIA Internatl. Workshop on Protection in Operatin~ Systems, 1974, institut de Recherche d'Informatique et d'Automatique, France, pp. 161- 176.
	NEUM 75	NEUMANN, P. G.; ROBINSON, L ; LEVITT, I~. N.; BOYER, R. S.; ANt) SAXE~A, A. R. A provably secure operating system, Stanford Research Inst. Final Report, Menlo Park, Calif., June 1975.
	ORGA 72	Elliott I. Organick, The Multics System: An Examination of Its Structure, The MIT Press, 1972
	ORGA 73	Elliott Irving Organick, Computer system organization: The B5700/B6700 series (ACM monograph series), Academic Press, Inc., Orlando, FL, 1973
	PALM 73	PALME, J. Protected program modules ~n Szmula 67, Research Inst. National Defense, Stockholm, Sweden, July 1973.
	PARK 75	PARKER, D. B. Computer abuse assessment, Stanford Research Inst., Menlo Park, Calif., Dec. 1975.
	PARN 72a	D. L. Parnas, A technique for software module specification with examples, Communications of the ACM, v.15 n.5, p.330-336, May 1972 [doi>10.1145/355602.361309]
	PARN 72b	D. L. Parnas, On the criteria to be used in decomposing systems into modules, Communications of the ACM, v.15 n.12, p.1053-1058, Dec. 1972 [doi>10.1145/361598.361623]
	PARN 72c	PARNAS, D. L. "Some conclusions from an experiment m software engineering techmques," in Proc. 1972 AFIPS Fall Jt. Computer Conf. Vol. 41, AFIPS Press, Montvale, N. J, 1972, pp. 325-329.
	PARN 74	PARNAS, D.L. "On a 'buzzword': hierarchical structure," in Proc. IFIP Congress 74 Informatwn Processing 7$-Software, North Holland Publ. Co., Amsterdam, The Netherlands, 1974 pp. 336- 339.
	POPE 74a	POPEK, C. J.; CLINE, C.S. "Verifiable secure operating system software," in Proc. 1974 AFIPS National Computer Conf. Vol. 43, AFIPS Press, Montvale, N. J., 1974, pp. 145-151.
	POPE 74b	POPEK, G.J., "Protection structures," Computer 7, 6 (June 1974), 22-31.
	PRIC 73	William Robert Price, Implications of a virtual memory mechanism for implementing protection in a family of operating systems, 1973
	REDE 74a	REDELL, D. R.; AND FABRY, R. S. "Selective revocation of capabilities," IRIA Internatl. Workshop on Protection in Operating Systems, Institut de Recherche d'Informatique et D'Automatique, 1974 France, p~j.197-210.
	REDE 74b	D. D. Redell. , David D. Redell, NAMING AND PROTECTION IN EXTENDABLE OPERATING SYSTEMS, Massachusetts Institute of Technology, Cambridge, MA, 1974
	RITC 74	Dennis M. Ritchie , Ken Thompson, The UNIX time-sharing system, Communications of the ACM, v.17 n.7, p.365-375, July 1974 [doi>10.1145/361011.361061]
	ROBI 75	Lawrence Robinson , Karl N. Levitt , Peter G. Neumann , Ashok R. Saxena, On attaining reliable software for a secure operating system, Proceedings of the international conference on Reliable software, p.267-284, April 21-23, 1975, Los Angeles, California
	SALT 74	Jerome H. Saltzer, Protection and the control of information sharing in multics, Communications of the ACM, v.17 n.7, p.388-402, July 1974 [doi>10.1145/361011.361067]
	SALT 75	SALTZER, J. H.; AND SCHROEDER, M.D. "The protection of information in computer systems," in Proc. of the IEEE 63, 9 (Sept. 1975), 1278-1308.
	SCHI 73	SCmLbER, W. Design of a secumty kernel for the PDP-11/45, Air Force Elect. Systems Div., ESD- TR-73-294, Dec. 1973.
	SCHR 72a	Michael D. Schroeder , Jerome H. Saltzer, A hardware architecture for implementing protection rings, Communications of the ACM, v.15 n.3, p.157-170, March 1972 [doi>10.1145/361268.361275]
	SCHR 72b	SCHROEDER, hi "Cooperation of mutually suspicious subsystems in a computer utility," PhD Thesis, MIT, Cambridge, Mass., 1972.
	SEVI 72	SEVICK, K.C. Project SUE as a learning experience," in Proc. AFIPS 197~ Fall Jr. Computer Conf. Vol. 40, AFIPS Press, Montvale, N. J., 1972, pp. 571-578.
	SHAW 76	SHAw, M.; WULF, W. A., AND LONDON, R. L., Abstractwn and vemficat~on in Alphard: Iteratwn and generators, Tech. Report, Carnegie-Mellon Univ, Pittsburgh, Pa., 1976.
	SIMO 69	Herbert A. Simon, The sciences of the artificial (3rd ed.), MIT Press, Cambridge, MA, 1996
	SPIE 73	Michale J. Spier , Thomas N. Hastings , David N. Cutler, An experimental implementation of the kernel/domain architecture, ACM SIGOPS Operating Systems Review, v.7 n.4, p.8-21, October 1973
	WALT 75	K. G. Walter , S. I. Schaen , W. F. Ogden , W. C. Rounds , D. G. Shumway , D. D. Schaeffer , K. J. Biba , F. T. Bradshaw , S. R. Ames , J. M. Gilligan, Structured specification of a Security Kernel, Proceedings of the international conference on Reliable software, p.285-293, April 21-23, 1975, Los Angeles, California
	WEIS 69	WmSSMAN, C. "Security controls m the ADEPT-50 time-sharing system," in Proc., 1969 AFIPS Fall Jr. Computzng Conf. Vol. 35, AFIPS Press, Montvale, N. J., 1969, pp. 119-133.
	WULF 73	W. Wulf , Mary Shaw, Global variable considered harmful, ACM SIGPLAN Notices, v.8 n.2, p.28-34, February 1973 [doi>10.1145/953353.953355]
	WULF 74a	W. Wulf , E. Cohen , W. Corwin , A. Jones , R. Levin , C. Pierson , F. Pollack, HYDRA: the kernel of a multiprocessor operating system, Communications of the ACM, v.17 n.6, p.337-345, June 1974 [doi>10.1145/355616.364017]
	WULF 74b	WULF, W.A. Toward a language to support structured programs, Carnegie-Mellon Univ., Pittsburgh, Pa., April 1974
	WULF 76	WULF, W. A.; LONDON, R. L.; AND SHAW, M. Abstraction and verzficat~on in Alphard: Introduction to language and methodology, Tech. Report, Carnegm-Mellon Univ., Pittsburgh, Pa., 1976.