Read Paper (in PDF)
Duncan Grove
DSTO
Australia
Toby Murray
DSTO
Australia
Chris Owen
DSTO
Australia
Chris North
DSTO
Australia
Jeremy Jones
DSTO
Australia
This paper describes the security and network architecture of the Annex system, a family of technologies for secure and pervasive communication and information processing that we have developed at organisation anonymised. Our security architecture is built on top of a distributed object-capability system, which we believe provides an ideal platform for developing very high assurance devices. Our network architecture revolves around next generation networking technologies, including Mobile IPv6 and 802.11i wireless networking, but includes a small number of important extensions to improve security, robustness and mobility in the military context. A particular and unique contribution of our work is the tight integration of our very strong security architecture with next generation networking technologies. To complete the paper we describe our reference implementation of the Annex security and networking architecture, which consists of a number of devices known collectively as the Annex Ensemble.
Keywords: security architecture, object-capabilities, microkernel, multi level secure