Table Of Content

ecnaru snsoAitamro f rneoIrfawt fgonSikcehC-fleS doT trahnieR nyloraC rehctteoB deir fattorGeboR kraM namlekcuK ATFI-LRFA noehtyaR noehtyaR noehtyaR scinoiv A1422 .riC OP xoB62429 OP xoB62429 OP xoB62429 H,OBFAPW A,Cseleg nsAoL ,Cseleg nsAoL A A,Cseleg nsAoL 45433-7334 90009-2426 90009-2426 90009-2426 SM575P/7R/ER 125A/ 1SRM/ER 025A/ 1SRM/ER tcartsbA etar u lcfacotatims n saeserhic ttrd eoe eycfmShbnrUtaani mnooditamro fgnniive i yehoehctkTa dna yl enmoiittamrofni ot eht rethgifraw nehw dna erehw ti si .dedeen noitamrofnIecnarussA , r.eyvl e eewdmtoniaHatr un hcostciioatbamr olfancii t tigarnhcitr unrsoonifeta d) nAseuIiho(tf evitavonn isehcaorppa era dedeen ot eveihca hgih slevel fo noitamrofn iecnarussa rofyratilim snoitacilppa hcus sa dnammoc dna lortnoc .)2C( nA noitatpada fo laciteroeht rekcehcstluser ne es bayhelekr etaBainrofil afyCotisrevi ne U htmtau llBeun a. M rfhDocraes ee rhmto rdfevired r -.eeFfsdhAltntSe lUUSgunsiesr inhm otoseirn hwpottiaytaaRc ielfpipla - lldaae reioerltvpepsa gnikcehC deddeb mnEoitamrofnI metsyS erawtfoS )SSIECS( ,margorp ew evah nugebgniyduts yethitlibis afeof gn issruekcehc ot ecnahn e n eoehicttnaamrruosfs nafio a .metsys nI siht,repap suoirav smelborp ni noitam reocfnnairussa era ,detneserp gnola htiw selpmaxe fo wohsrekcehc dezyla nssaimelbo repse hetvl oosstrekce hgcni sfyuotilibisa ee fh.Tsnoitul osdsaeilp petabhgim dna sethitfe nfeob sgdrnaeiekstcu se,nhfico ro no i ,tn lhcisatndn iuooewjhirnttooeimcfmdoart noitamrofni ecnarussa era .dessessa eW edulcnoc htiw ruo raen mret snalp ot etartsnomeddna .noitacilp p 2acCitsila e nareicnarus snaoitamrof nri osfrekce h fceo seu hettadilav 1. noitcudortnI ehT FASU noisiv ot dleif a 2C ytilibapac ot eht riA & ecap Srednammoc lliw eb deveihcayb gnidivorp RSI2C seitilibapac ot etaroballoc yllabolg ni troppus fo eht lanoitaNdnammoC seitirohtuA ,)ACN( lla sfeihC-nI-rednammoC ,)sCNIC( ,secivres ,seilla dna ehtyranoitidepxE ecapsoreA ecroF .)FAE( ehT ciman yeDcapsor edAnammoC )CAD( si eht gnihcrartepveocnoc rof lla erut udfeti nsUetatS riA ecro F)FA SdUn(ammoC dna lortno C)2C (smetsys ot yfsitaseht 2C .noisiv sihT CAD tpecnoc si tnedneped nopu eht noitatnemelpmi fo na erutcetihcrataht .ssenera wlAabo ldG ndai rlGabo lyGlem a,nsrelba ndeesab-ygolonhc estniatnoc labolG dirG si eht ,elbareporetni lautriv skrowten fo ,esnefed ,lanoitan ,laicremmoc dna snoit aldcaninanou imat mtasoanmcdreet tstnyaisht lli werots dn ano ietvao mmdrnoeafdniivorp eht ,derussa hgih ytica pyatcivitcennoc rof srednammoc dna secrof ot yllacima n.ytdcaretni nI ,ln aorl,bieadotltilibn rGd aeeGdfnmhaoeatd neuhf t, CdAeDi fs iint ineec dRaeiSphIst2oCreA n gni aa0lp0Pm0a 2Csa a s.uaceorfa n g e niRhh aaSTs 0lpIi s0Pm2elsu0aChbac2CtaeotrFsAe RSI 2cCig entoairttcse r giendliithawrtnec nnoo c ysttinleimbearpiau cqdenra .seussi sihTsucof ,sa eehsrcs aieehr hwdet dcndnanieoaheirtn tuier aswholmstfar a ebo,,dofdsilnievGirtoGartPs“ a labolG dirG erutcurtsarfni ot niatbo ,sselmaes ,detcetorp ,elbailer ediwdlrow ytivitcennocot troppus lla RSI2C noissim .sdeen ehT erutcurtsarfni tsum ssecorp dna egnahcxenoitamrofni Report Documentation Page Form Approved OMB No. 0704-0188 Public reporting burden for the collection of information is estimated to average 1 hour per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to a penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. 1. REPORT DATE 3. DATES COVERED 2000 2. REPORT TYPE 00-00-2000 to 00-00-2000 4. TITLE AND SUBTITLE 5a. CONTRACT NUMBER Self-Checking Software for Information Assurance 5b. GRANT NUMBER 5c. PROGRAM ELEMENT NUMBER 6. AUTHOR(S) 5d. PROJECT NUMBER 5e. TASK NUMBER 5f. WORK UNIT NUMBER 7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS(ES) 8. PERFORMING ORGANIZATION Air Force Research Laboratory/IFTA,2241 Avionics Circle BG REPORT NUMBER 620,Wright Patterson AFB,OH,45433-7334 9. SPONSORING/MONITORING AGENCY NAME(S) AND ADDRESS(ES) 10. SPONSOR/MONITOR’S ACRONYM(S) 11. SPONSOR/MONITOR’S REPORT NUMBER(S) 12. DISTRIBUTION/AVAILABILITY STATEMENT Approved for public release; distribution unlimited 13. SUPPLEMENTARY NOTES 2000 Command and Control Research and Technology Symposium 14. ABSTRACT 15. SUBJECT TERMS 16. SECURITY CLASSIFICATION OF: 17. LIMITATION OF 18. NUMBER 19a. NAME OF ABSTRACT OF PAGES RESPONSIBLE PERSON a. REPORT b. ABSTRACT c. THIS PAGE 12 unclassified unclassified unclassified Standard Form 298 (Rev. 8-98) Prescribed by ANSI Std Z39-18 ssel dt r nta ferg,o moemnnpruoos iirnrdtia oeavremmntpreyotf ndina deebniat snuis a hgihetats fo”.ssenidaer 1 traP fo eht ygetarts deifitnedi ot eveihca siht laog :si )1 evorpmI labolGdirG noitamrofni ecnarussa ot eetnaraug eht ,noitcetorp ,ytirgetni dna ytilibaliava fo rethgifraw ,noitamrofni dna )2 tnemelpmI gnigreme noitamrofni ecnarussa seuqinhcet otyltnacifingis .noitceto rfspolev eelvorpmi sA eht metsys fo sme tmsgyisd ayrtaipl id bneaamroe cpleoabrceittniirc ot ecaepcsnoarneiamod nihtiw eht labolG ,dirG eht derussa ecnamrofrep fo eseht smetsys semoceb erom.tnuomarap ynaM fo en sod eieshtdmtademetrbsomyf esneir a ytlnievdane ehnp oeepdruawt ftoasshettarepo nihtiw eht lacitirc tniartsnoc fo emit-laer senildaed ni eht tiusrup fo nois s.ismsenevitceffe nI ,noitidda sa eseht smetsys era dengised ot eb erom ,elbapac eht erawtfos semoceb hcumerom me tdseydsd eebmmiet- llaaecritirc-n oei csfensohaitmmro fg ern.heixtpre ul, sptssmlAao ucaser .ecr orF ieA h otetgnella htcnacifing i saseirawtfos ecud onrep tyf eoehstua ctelbucif fyildralucit rssamipet seyss enfhootitadi l dannvoaitacifi reehvT tcaxeni stuptuo desab no snoitatupmoc morf a noisseccus fo citsirueh dna etamixorppa .smhtirogla ynaM detcetednu erawtfos srorre evlovni a erar noitanibmoc fo secnatsmucricdna stneve ot .rucco esuaceB fo rieht ,ytirar a yrev egral rebmun fo tnednepedni stset dluoweb dedeen ot etaerc eseht lai c,espescnatsmucric fi yeht nac eb decudorper ta ,lla ni eht.yrotarobal ,s sstnAmno eeiy tntef so ako,dypa mtesm erl doesouldche fsaeth,nebb tdiromnileerGtGefvoah .d e eymr o e odlstafepiseteybc dse drde rnt tsoac ear cetrholtoatraenruded iesrearwtfos lareveS sraey ,oga noehtyaR deyevrus melborp stroper fo srorre taht erew ton detceted nia s efdepoehyittfis s.yanelo vcierthuaTsrg emtentisy srb aurds ealtr ifmtaen turs ayndsoairtcudorp srorre taht netfo niamer ni deddebme smetsys retfa metsysbus dna metsys .noitargetni tIsaw denimreted taht ynam fo eht laudiser srorre detluser morf na lausunu noitanibmoc folanretxe secnatsmucric taht erew ylekilnu ot eb deretnuocne ni eht noitarget nyirotarobal dna tahtthgim ton neve eb deretnuo cgnnei rluadnoit a.rgenpiotset ,erofereh Teseht laudiser srorre thgimreven d el ri dmetg e etnnedetnuihdbsu mt eyosrsbscioamnfeer e tpnani eh eentemroihiopwttcmroacw .di rlGabolG erawtf ossmets ynsoitamrof ndieddeb me ehmto rsfror ryen asematanimi ld enyafitne dorited rnoI , sets al nusbeeodirmiosoyrhs foatonelve pobpmfie otd.a ddeeirmlaraovfr e pgnitse Tsi ehttsom yle dd iedwso uhgtne i m fttsoa am d.ghesienttt ltisneaamyervtr smacoseif a,rdrrieeupvqeewroH ti sah neeb nwohs taht ti si ton elbisaef ot esu gnitset enola ot etadilav egral smetsys ot ahgih eerged fo ytilibailer reltuB[ .]3991 ,eroferehT ew osla tnemmoc no evitanret lsaehcaorpparof gniru s.mnseestesny tsgc nesi revrruoooqrFcip n-,hsecsl eepetnmrta acxseeermriotcem odsesuot yfirev metsys .ssentcerroc ,revewoH esuaceb fo eht ytluciffid fo eseht ,seuqinhcet ti siton l ,a sschn m icoo yr edtu it flemtecsgtsop gesnanra p,rh y iriotalatlsoaphpullltttbaaenymwonsca detsurt lenrek taht si elba ot eetnaraug niatrec seitreporp fo a regral metsys tliub no pot foeht .lenrek rehto nnAoitadi lhacvaorppa desu ot erusne elba ielcenramrofrep si lano i.tyccnnuafdnuder roF ,elpmaxe eerht snoisrev fo erawtfos yam eb yltnednepedni detnemelpmi ot mrofrep anevig .noitcnuf ehT stluser fo hcae noisrev era ,derapmoc htiw a gnihctam ytirojam deralced saeht .renniw ,reve weorHeht era a rebmun f ola csimteclabrop r h.pltyaicnwnoaidtncunduef rnetfO .ten sesud ianshceiTep beydlnliacit s di eettrrao aat nspsetmrl oauec ssseonrhowitatneme lephmti s mrseertnesg tyidns sneoeam hdeywllpt mnne ieerg dtandnf iee.oektpskraeraoldomwenrrirreoc nI ,noitidda eht tnuoma fo emit-nur secruoser deriuqer ot etucexe eht noitcnuf si desaercni yba s i,htth gesiretacruo seemrit- neur res hm.wee t e srrnfyohIosttcaf t oyn aemsaerc neivitacilpitlum .elbatpec ceab pihsr e tn fswsooo'cmet seeyhsstaer cynlitnacifin ghic si,hswro rerreawt floasudi snne aerwchotH dna eytaumbirt noot cn,osie srysul iltdmi neaeac fbcu?id dfeyeir ltnreagovniiistmci elfeferetfA noitaredisnoc fo eht sevitanretla ylsuoiverp ,dessucsid ew dedulcnoc taht na yleritne wen mgidarap saw dedeen ot erusne taht ,egral xelpmo csmetsys htiw detim ielmit -sneucrruosernac .yltcerr oectare poeotunitn oyce htta hortsenn aemvitcef ft es ndoaiecniatni aemb oT evorpmi e hntoit asdsielcaovrp dna erusne e lhsatsneonittcaerre rpdoonc aytirgetni folacitirc ded d,esbmmeetsys eht riA ecroF sah detsevni ni a hcg rngai nekmiscateerarhggcoi-rtfpsleevsni .erawtfos ehT gnikcehc -,felreaswtfos osla nwonk sa stluser gnikce h,cygoloynlhscueotunitnoc srotinom flesti ot tceted suoicipsus .stneve ehT ygolonhcet si desab no rekcehc erawtfostaht setucexe ta lacitirc stniop ni eht deddebme erawtfos ot kcehc eht ssentcerroc fo ehtylpeed d e.dsdmehbtmierogla esuaceB eht srekcehc era detres ngi ntinreumdpolev eddna niamer nieht lanoitarep o,erawtfos srekcehc nac tceted srorre gnirud lla sesahp fo gnitset dna lanoitarepo.esu nI ,noitidda srekcehc nac tceted suoenorre stluser taht od ton ecudorp suoivbo smotpmys taeht .srets e ytdbekoolre v eoyblis atehg i,msu hdt nlaev emletsys g nnsoimi tetdata ersmsdeyradpsoeofbnm iEt naeno pfmooc eht CnAoDi tg andminrdaoifvnoirp ot 2C sedon tsum mrofrep sa a rehsilbup ro rebircsbus fo ,eruces elbailer .noitamrofni esehT smetsys eriu qlearno intoiidtdaadi lsadvohtem ot erusne eht lan osisteanrtecpeorroc dnaytirgetni fo eht metsys ot eveihca eht slaog fo eht FASU 2C .noisiv ehT SSIECS margorp signiylppa y groelkocn ehohctcet a eg ns annroo i imftdhteoaetatcdimsnidwryoleo sipbfetpmnhaaeittcepxe taht sih tygolonhce tlliw tluser ni a ci ttanmeamredvorpmi ni eh tytilibailer fo dedle.iefrawtfos desaB no ylrae sgtnliutsaerrtsn otmaehdt srekcehc era elba ot t c”estueodici psstunse“ve sayeht rucco ni lacitirc-noissim ,smetsys ew evah nugeb gniylppa srekcehc ot edivorpdevorpmi noitamrofni ecnarussa rof evisnetni-erawtfos smetsys taht era elbarenluv ot latnedicca dna suoicilam .skcatta ruO laog si ot esu srekcehc ot tceted htob sepyt fo skcatta sa yehtera gnirrucco os taht evitceffe noitca nac eb nekat ot retnuoc hcus .staerht ehT stlusergnikcehc ygolonhcet ew lliw won ssucsid si a nevo rnpoitadil advohtem ot erussa eht ecnamrofrep foeht .noitamrof nsi t fiyotiruc ees hytfir e ovdtoht eemlba iyvllaitnet o sapdi nmaets ydseddebme 2. roirP hcraeseR ni gnikcehc-fleSsmetsyS ,seitisrevinU ,noehtyaR dna eht riA ecroF evah derosnops elbaredisnoc roirp rekcehc.hcraeser ehT lanime shcraeser ni srekcehc sah neeb gniogno rof erom naht 01 ,sraey del yb .rDleunaM mulB t ayt ieashir tnef rvo,oi yfnteiUall eaodkCherwne iB m fgegsenhitditdltkauacrsheaethprc si eht noitadnuof rof eht SSIECS troffe mulB[ dna nannaK .]9891 lareveS sraey ,oga noehtyaR nageb a llams rekcehc noitartsnomed ni noitcnujnoc htiw a noitcudorp radar edargpumargorp [ Boettcher and amelleM .]5991 owT fo eht eerht srekcehc depoleved sa trap fo eht noitartsnomed detceted srorre taht erew ton derevocsid litnu thgilf .tset sihT tluserrehtruf .sseco rtpnempolev emdets ylslare v no naeirawtf ogsnikcehc-fl e fseoul aev h ft soduecnivnoc A rekcehc si laic eeprsawtfos taht si deddebme ni edoc ot yllaunit nkoccehc stluser revo aegral rebmun fo .snoitucexe tI tsum evah a doog ytilibaborp fo yllautneve gnitceted ynasuoicipsus elpm idasell a e cob.Tmra leasl a ffyotilibabo rwp oylr egavniniatni aemli h,wsnoitidn o rcsotneve ,rekc ethic tsum eb hrceulmp mdins a eelrb oanmialh e te rlre a ahgndwtnietigkfeicobresdohnca dd aylno a ltl nanu moo. simd f taado yuenerchahoe rTmxteeecv maotfa h rteehktc resehilcpmis ecnedneped nliacitsita tss t fieocnedi voes l saeirawtf olsanigi reo hntaht . 2.1 Checking for the Pentium Division Bug elpm atxneell e scnexadeiv orropssec omrupi t enefsehoaPte llearnig isr'ol e gntnuonibiIsi veihdT fo eht laitnetop eulav fo srekcehc dna setartsulli taht srekcehc nac eb lufesu rofgnitceted seilamona taht yam eb desuac yb erawdrah ,srorre erawtfos ,srorre ro neve atad .gnirepmat ehT muitneP noisivid gub detpurroc stluser yrev ,ylerar ssel naht 1 ni yreve 8 noillib.stupni ,s sserleeshut rfeov e r N eodmhseu tsrineetocvno ooestrcPipsid dna letnI saw decrof ot llacereht ”yggub“ srossecorp dna tcerroc eht.rorre nehW swen fo eht muitneP noisivid gub saw ,dehsilbup mulB dna namressaW was ti sana ytinutro poepttoartsu lelhit rewop fo eht r e.kmcgeihdcarap ye hdTetnevni a deneirbamwotcfos rekcehc dna rotcerroc taht sedivorp na a“ ”iroirp noitulos ot eht muitneP gub mulB[ dna namressaW ,]6991 hcihw htob stceted dna stcerroc eht suoenorre noisivid .tluser sihTmuitneP noisivid rotcerroc/rekcehc seod ton neve deen ot wonk tahw desuac eht atad ot eb suoenorrero .nt tea rnvhno eetarssrieerp 2.2 Performance Checking Demonstration ylraE ni eht SSIECS ,margorp ew deilppa srekcehc ot a noitcudorp radar edargpu margorptaht saw gnidda a wen radar edom ot eht gnit seirxaewtfos[ ,trahnieR .te .la .]9991 ehT erawtfosrof eht wen edom saw desab no gnitsixe erawtfos morf rehtona radar ,margorp tub dah oteb erawt fedohestzyl am naS aeS.tIm EreCohSfTt atlnpe r t et po fid atofeadtiiadfi dyolmlaitnatsbus stnemeriuqer rof eht snoitacifidom dna deifitnedi etadidnac snoitcnuf rof ,gnikcehcyllautneve .p oloolrt n)oRcA FeC t(marr aelsa ltanfats n eoghcntitceles ehT RAFC lortnoc pool si na elpmaxe fo na mhtirogla erehw ereht era on evitinifed selurrof gninimr eftied a tluser si thgir ro .gnorw ,rehta Reht RAFC pool skees ohtsi leblabtassteesulav gnitc eej le,irehlwb is stsseao g plsr yatasnectaa remmt ee dt dtelsoahoyshthsts e RrreAhohFtftC eslaf stegrat dna gniniatniam a wol eslaf mrala .etar sA a ,tluser ruo RAFC rekcehc skoolrof nrae hh,ttnaoritada regcendamro fmre ettpsnyascifi negtiasc iydlnbia btsoatrhlp tu"sseuroicipsus" .st l"ugsneorrw" nI ,lareneg RAFC lortnoc spool kees dlohserht seulav taht peek rieht smetsys gnitarepo nina lamit p,orennam neve elihw e,httnemnoriv nsea derusaem yb eht ,rosnes si .gnigna hdcesaBno kcabdeef morf eht ,rosnes eht dlohserht tsum eb yllaunitnoc detpada ni a elbats rennamot g nliagtn na.ehsmcnnooirtiivdnneoc oT pleh niat n,iyatmilibats eh tstnemeriuqe rrof ehtRAFC edist useoiul advetalucl ae. c hdftlIohser he thr tosfeul aevlbawol lfdao n yaafbice ppso ollortnoc .etairporp p saeaul amvumin i rmmoumix aem h otttes e sr ti,iegn adreifice pes hfto oT teg scitsitats no eht detcep xneoitubirtsid fo dlohserht seulav dna pleh yfitnau"qsuoicipsus" ,seulav ew tsrif detalumis eht RAFC dlohserht noitaluclac 000,001 semit gnisu ylmodnar detareneg tupni atad evitatneserper fo taht nees ni a laer .metsys desaB no esoht ,scitsitatsew dediced ot tes eht rekcehc ot erif ta tnatsnoc seulav esolc ot eht muminim dna .mumixam nI ,noiti de dwdaewol le ahrtekceh cot erif ylno nehw eh tseul ae vrtecwep sruesvo %09 fo ehtemit .lavret neim ietvitatneserp egarnirud gnikcehC sa wdemrofrep ni eht mne otyisrtyoastragreotbnai lni lellara phtiw eht ralugemretsys noitarg e,ttnrioffe os eht s'margor pthgilf tset eludehcs dluow ton eb ylevit adgeetncapmi ybeht rekce h.ctnemirepxe nehW eht rekcehc saw nur ni eht noitar gyertontiarobal roirp ot thgilf,tset eht dlohserht seulav erew yltnetsisnoc ,wol gnisuac eht rekcehc ot erif tsomla yltnatsnocrednu lareves tnereffid tset .snoitidnoc ehT erawtfos tnempoleved maet elbisnopser rof ehtnoitcudorp epat edargpu saw demrofni tuoba eht smelborp htiw eht RAFC pool derevocnu yb ehtrekcehc dna yltneuqesbus detcerroc eht noitacilppa .edoc ehT rekcehc saw nur htiw eht detcerrocedoc rof eht lanif emit ni eht noita rygreottnairobal retfa eht metsys dah neeb ni thgilf tset rofemos .emit nI eht lanif re k,cneohictartsnome deht rekcehc deri fylbaredisnoc ssel netfo naht,erofeb .devorp myilbaredisn once edb aehcnamrofr eppo oRlA FeC htta hetcnedi vgenidivorp set a er thtentsue ulmslaii lvrhfieTop ex nve.ei sv t y reeihryelstelkpnivec meWveeisihhsntctialer rekceh cdebircsed ,ereh ew erew elba ot tcete dsuoicipsu sstneve gnirrucco ni eht metsyshcihw .Wyrotarob ae l hnstina ermeh ty o nydabetcet egdni et boenrew e h ntdiedulc nsi arwekce hnaceh ,erawtfos ti derif dna yletai ddeemmmriofni eht retset taht ereht saw a melborp htiw ehtmetsys .ecnamrofrep sA a ,tluser eht erawtfos saw devorpmi erofeb evisnepxe thgilf tset sruoherew wasted. 3. sr eekccne ahnrCo uihstcsarA manreiosfenRI n oitamrof nI ecnarussa )AI( si denifed sa noitamrofni snoitarepo taht tcetorp dna dnefed noitamrofni dna noitamrofni smetsys yb gnirusne rieht ,ytilibaliava ,ytirgetni,noitacitnehtua ,ytilaitnedifnoc dna .noitaiduper-non sihT sedulcni gnidivorp rof noitarotser fo noitamrofni neani f .e esdWeitilibap ancoitca edr n,anoitcet e,dnoitceto rgpnitaroproc n yisbmetsys AIrekcehc sa eno taht ylral usgmerrofrep emos ecivres ni eht aera ,y t fi,,olyyattiiitrlngieebdtainlfiinaovca noitacitnehtua ro .noitaiduper-non roF ,elpmaxe na ytilibaliav arekcehc dluow ylralugeryfirev taht a metsys ecruoser si ton gnieb detanimod ni na elbarisednu yaw yb yna .ssecorpnA noitacitnehtua rekcehc dluow yfirev a s'resu ytitnedi no a launitnoc ,sisab elihw naytirgetni rekcehc dluow etadilav edoc ro/dna atad skco l.bylraluger nI eht gniwo l,lsonfoitces ewtneserp emos saedi rof etadidnac AI ,srekcehc ssucsid eht laitnetop stifeneb fo ,hcae dna ssessarieht ..ytilibisaef 3.1 noitacitnerhetkucAehC Authentication is defined as a security measure designed as a means to establish the origin of a transmission, message, or originator, or to verify an individual's identity. A typical authentication method is to use a password that cannot be easily guessed by an unauthorized user. The use of biometrics, or measurable biological characteristics, is a more sophisticated method for authentication. In computer security, biometrics refers to authentication techniques that rely on measurable physical characteristics that can be automatically checked. Examples include computer analysis of fingerprints or speech. se unqoi innthiacce itehts gnuyueaoh d ht,oytustrl asaAyevtn ie nx vaiedinlntopacmmemofocfce etubirtta si taht eht ssecorp srucco ta noitaitini fo a resu ro ssecorp gnitseuqer a .ecruoser A l ancoiiptyatci tsnteshitsunaoc fo a pets-en o,ssec ogrnpiyficeps eht eulav fo a elgnis,retemarap noi tsa icyt il a.t l rhdnraye tre ouytdnohatsliuawtcu nlr suafoitsafobna-ai pers neunonoAliuvvbo sah ot taefed eno reyal fo esnefed ot niag ssecca ot eht .metsys rehtonA ssenkaew si tahtsresu netfo evael selosnoc dednettanu elihw llits deggol ,no gniwolla na redurtni htiw na ysae ytinutroppo rof .esusim A ssel nommoc melborp srucco nehw a s'resu neercs si elbisiv ota neddus .rotisiv tI dluow eb laicifeneb ot evah na ysae dohtem rof eht resu ot knalb eht,neercs .t imor fyaw agnikoo ltsu jy bylbissop n oniAta crietknceehhtcu adluow evorpmi no eht n opiettas c-siestnenoceohrtpua yybllacidoirep gnik cteahhc t-serresu er adeedn iohw yeh tmialc ot .eb A rek cedeglhnuceolw leahhtc resu noa continuing ,sisab gnisaercni eht ecnahc fo na rotsopmi gnieb .detceted owT saedi rof na noitacitnehtua rekcehc era debircsed :ereh eht tsrif desab no ,scirtemoib eht dnoces gnisu .segnellah celifor ptneil claunitnoc ehT sisab fo eht tsrif ,aedi ,scirtemoib si gnisaercni ni esu yadot sa na lanoitidda snaemfo noitacitnehtua ot tnemelppus eht lanoitidart drowssap .dohtem A cirtemoibnoitacitnehtua set u fbloi a reyc kthlircttlseeaays h uhue cornprdt eiulsktsuicnno heoe w.hcrycot irte nhedsiihT hcaorppa sdda ecnarussa ot eht metsys yb gniunitnoc eht noitacitne hstsueac o.rypletinifedni tI dlu oeyywll tbl eiaasbruiau lcecnaereivpas s-oeh tgyifhi rteavht erthontteasre ersppio ehtemas eno taht saw yllanigiro detacitnehtua nopu .ni-gol nI siht ,esac rotarepo ytimixorp dluoweb dekcehc ta slavretni ot enimreted rehtehw eh sah devom yawa morf a .elosnoc rehtonAerutaef thgim eb gniknalb eht neercs revenehw eht rotarepo skool yawa morf .ti elbissoP cirtemoib .noitacifir eevc a rf,osi r,ilanit eerdulc nsidohtem se gonte l lalra mae usohstntdcu aisnf tiao,nsrnonocoictacitn eehlt iutf an o,edra inpeelodhcciTes reoahtlti m.inSoitamro fentia v eifc ro e )prigw opneafiny(r eh uc,qaselavretni ,re kccierhtcemoib tife nleabnoit i .dnsd Adarne evsesnec onropitacitneh te tu hraastehiltif otrnpe iteflihocfte neehbt fo s ihhctaorpp asi , thaghutoht leano eceip n ofiot atmhrgoifmni d eesbimor ptmaoc emos,tniop ti si ssel ylekil taht ynam seceip fo noitamrofni dluow evah neeb deniatbo yb eht.rotarteprep t e,pnwotem o,hem annedi asm'reht o,mN Se Srnaoitamrof neignella hlcanoitid dsai hfstoelpmaxE .htr isb'tner a fproa edy n,ahtr i fbroa e,yeman .elpmaxE C onsider the case of an information system in a hospital emergency room where medical personnel need rapid access to patient information in life or death situations. However, patient records contain sensitive information, including medical history, address and billing information that passersby might be able to view if it isn't carefully protected. This poses a difficult security challenge. nI eno efil-lae r,noitautis a reganeet deniatbo eht eman dna sserdda fo lareves stneitap morfna dednettanu lanimret ni na ycnegreme .moor eH retal etorw srettel ot hcae fo eht,stneitap gnidneterp taht eh detneserper eht ,latipsoh dna demrofni meht taht rieht doolb selpmasdetset .detlu ssetrius wsaulo r.e V m rIueoHNvfitisop hgu onrohitta uetlibsatte rsdgieehtrtne vet evhrragephik mcneohictacitne hdteusaab-scirte mAoib eht esu fo a launitnoc laniter nacs fo eht .resu ecnO eht rekcehc dah detceted taht eht esrunro )gt snn n rsiee eseeyihonephrrtt tirattradc hosupesrrnihdoead ntpd ec(alttohaftd neaeilnhmutret dluow evah ne e.bdeknalb reh ttoinfAeneb fo siht epyt noi tfraoeckictenhecht usai taht ehtresu nac knalb eht neercs ro( spahr eepv o emnveoirittiasmnre osmfonrif )ti ylerem yb gnikoolyawa morf .ti sihT dluow eb dehsilpmocca yb eht laniter ro( )siri rennacs gniliaf ot tceted ehtdilav s'resu cirte mgoniibrud eht txen .kcehc eh Tegatnavda fo siht erutaef si taht ti swolla eht resuot tcetorp noitamrofni htiw a ylraen evissap noitca - gnicnalg yawa morf eht neercs - daetsnifo gnivah ot gnisserp a nottub ro a yek .noitanibmoc semitemoS eht ssenevitceffe fo aytiruces . te i s ostuytiis aw eosehirutaef Benefit/Feasibility. Checkers based on biometric authentication push the state of the art to such a degree that we recommend postponing further research and development at this time. Although the field of biometrics is advancing rapidly, it is still in its infancy. In addition, there are still significant spoofing problems with iris and face recognition. However, this is an interesting area for checker research when the field of biometrics has matured. 3.2 n oyittiarrrueuckgeciSefhnCoC hguohtl Ayti rsuecietsilibapac no snoitatskro wevah devorp m,iyltnec egrnirusne eht ytilibadna noitavitom fo sresu ot ylreporp erugifnoc eseht seitilibapac sah ton neeb lufsseccus ot.etad elpoeP tcelgen ot tceles etairporppa ,sgnittes ro tes meht yliraropmet ot eno ,etats neht tegrofot tes meht .kcab nA reporpmi ytiruces noitarugifno cstneserper a .ytilibarenluv A rekcehctaht yllaunitnoc seifirev taht eseht sgnittes era tnetsisnoc htiw eht metsys ytiruces ycilop dluoweb .mets ye s h fAtloIlare ve o hodt tdd anlaufesu A yntoiirtuacr eursgeikfcneohcc dl uyolwlaunit nkoccehc eht sgnittes no a noitatskrow ropuorg s nfooi tnaithstkirwow a niamod ot erusne taht eh tsgn imtrtoefsnoc ot s'n yoetihittrauzciensagro .ycilop ehT rekcehc dluow erif nehw etairporppani snoitarugifnoc erew .detceted sihT si gni gsn neeolc ilnytaitah sircyrurugaciv efys nlgoencdiidwnepe dno metsys epyt ,TN( ,xinUnuS ,siraloS )XU-PH dna .noissim A denifer rekcehc fo siht dnik dluoc eb dednetxe ot,sllawerif sretuor dna rehto elbarugifno c.secived oT ,etartsulli ew ebircsed eht noitacilppa fo aytiruces .sr ers ewobkot ecrnwebohictarugifnoc .elpmaxE Most organizations have greatly increased their usage of the internet in the last few years. This fact, coupled with the vulnerabilities introduced with downloading untrusted software (including Java applets), suggests that it would be beneficial to use the checkers approach to continually verify that workstations are in their safest configuration. In a related example, automatic virus checkers have become widely used in the last few years to significantly lessen losses incurred from downloaded viruses. It is possible that a similar benefit would be achieved through use of a browser security configuration checker, as outlined below. srekcehC nac eb desu ot rotinom eht ytiruc essgnittes no na tenret n,Iresw ogrnbidulcni ehtavaJ , sh gcyni tihei twrrntauee ctsteff soehlt i t.wele huus,taliyefahtcevTi ndlsiiisb ayr teainrluucves tluafed sgnittes era netfo on" "ytiruces ro muidem" "ytiruces ni( eht esac fo tenretnI.)rerolpxE resworB noitarugifnoc selif era elbissecca ot na ,rotartsinimda ecnis lanosrep sretupmocerots rieht resworb sgnittes ni a derahs .elif ehT mse'trsoytsart seilnoismndoac dluoc esu agnikcehc msinahcem ot yllacidoirep yfirev taht ytiruces sgnittes era tnetsisnoc htiw eht metsysytiruces .ycilop nI eht esac fo ,epacsteN a lacipyt htap ot eht secnereferp elif si margorp/:c / )se'mraensu(/sresu/epacsteN/selif prefs.js. sse coct Ae he.tlti nf se y ime yctnutt inos aiglers ahr nodiintufsipnvo cIiteneeaepehsrhetetdpo metsys si a swodniW TN mets ygsninnur no a T A,Fnoitit rnaepht lla selif e realbissecc aoteht edis t.udolrow fI ni ,SFTN eht elif yam ton ,eeblbiss etcucba nac eb edam os yb eht .resu fIa .noitaut ilsagel l ni sadaegga l efobs ldalu oswi h,trekce hec h otetlbalia vta'ne rsagnitt ess'resu .ytilibisaeF/tifeneB A ytiruce snoitarugifnoc rekcehc dluow eb etiuq ,lufesu yliramirp rofsti ecnein eovtn o.csresu y t,inciialg pA fm yoistseirr uustcmaeeesefs ot ekam meht, eevriotmceffe ecnis yeht era desu erom .netfo lanoitiddA stifeneb fo siht rekcehc era taht ti snur htiwwol ,da enyhalrcie sv daoeeebg n ntaoochtiectl afo c et,aiyry ftce iiihddrlytnouolamc prenasalcuger erusne taht resworb noitarugifnoc sgnittes era deniatniam ta na etairporppa .level ,revewoHa ye hhtguoht l,asnoitcn urfalim imsrofr etpa hytad oetlbalia ve arsalo ogtninna cystiruc efrsoebmun era semitemos tluciffid ot esu dna era .enorp-rorre gnimrofreP siht noitcnuf nihtiw na SOro ytiru ceess erh etyvtoil ientsiuaer clnaini gy r laaenmdoiv osormtp eneositacil pdnnpeiaaddebme .slo ogtninnacs 3.3 rek cyethiCrg eetdnoIC ytirgetnI si ehtq uality of an information system reflecting the correctness and reliability of the system software; the logical completeness of the hardware and software implementing the protection mechanisms; and the consistency of the data structures and occurrence of the stored data. Note that, in a formal security definition, integrity is applied more narrowly to mean protection against unauthorized modification or destruction of information. Code integrity is the property that software has not been altered or destroyed in an unauthorized manner. e rl .u aoes,c tcs mitn aet ia stinryisr Iunycnsasosiatam rs oeffnonoit sy rtseei i nnrfeorgohoetctnI .nro eik h cdsAeeahzfciro hd ten ugina n a n na,dsutehlnaoecuah nbf, m dst ra iiotatslnahaiahdvt ne o dti d si atdylsevnha lnuicoetc.ua o n rtilo eceeafspffuwehdbronoifstouadeeCseoshsmmuta yberehw na deziroht unaonsurep sniag ssecca ot a .metsys A rekcehc dlu oywllaunitnyofcirev .deifidom nnuiam esrtnemg eesd otcnatrop mtiaht A edoc ytirgetni rekcehc dluow etucexe edisni eht SO ro ytiruces lenrek no a raluger sisabot erusne taht on dezirohtuanu noitacifidom sah derrucco no lacitirc skcolb fo .edoc hcuSedoc snoitacifidom nac rucco yb suoicilam tnetni ro sa eht tluser fo a tluaf ro .rorre ehTrekcehc seifirev eht ytirgetni fo a regral detcetorpnu ytiruces ,lenrek na eritne ,SO a tesbus folacitirc .ese hfntooitanib m r,oaosceludom A elpmis elpmaxe fo a rekcehc noitacifirev dohtem si eht noitatupmoc fo a elpmis muskcehcot p,nynoropciutazil ahictiihnwi si neht ylra lduegkecrehc-er ot erusne ereht sahneeb n o .if ktoeecphdo utoll r cb adrntnloe Ioucvertioebeatc khnaklcteaae tenhrnwocoiintu noentni yllanoisacco skcehc a yrev llams noitrop fo eht SO ro detsurt edoc .kcolb ehT tniop si tahtti . eddeotcp ue er urcrfgonoooecrt steichx et eltylelidlwau t t nnast eeheiovtttsefuocexe .elpmaxE During the mission load of an avionics Operational Flight Program (OFP), a baseline cryptochecksum is calculated for critical subsets of code, including the security kernel. At regular intervals or after key events during the mission, the code segments are checked to ensure that they have not changed. If a code segment's hash is ever found to mismatch the original, the checker fires. In this way, critical portions of the OFP have increased assurance against modification. euD ot st neimairt t efs,monsiomtce-tlsa yetsri thgim ton eeblbiss oopt esu lluf muskcehcotpyrc ,smhtirogla hcus sa 5-DM egasseM( )5-tsegiD ro AHS eruceS( hsaH .)mhtiroglA Arelpmis noi t suhsec csreeu eixvmd lu eindqttae eac terhesdct t fiouingfhruane ttqcieesmbmnmoucskcehc .emit fO ,esruoc eht ffo-edart ereh si taht eht erom tnagele gnihsah smhtirogla edivorpretteb noitcetorp tsniaga ,gnirepmat tub eriuqer erom emit ot .etucexe hcaE noitatnemelpmitsum .ffo-ed asr itehttaulave Benefit/Feasibility. The area of integrity checkers appears very promising because cryptochecksumming technology is a mature field. The idea of regularly verifying the validity of a system's security kernel and important programs is both appealing and feasible. In addition, an integrity checker is portable, since the fundamental idea of hashing is well-understood and standardized. 3.4 Data Integrity Checker ataD ytirgetni si eht ytreporp taht atad sah ton neeb deretla ro deyortsed ni nadezirohtuanu .rennam ehT ytirgetni fo atad si na tnatropmi AI eussi esuaceb atad noitacifidom si netfoeht g nsienn oid fen imeyohostrzbtsnceierandrr e e unoe.pnmafuhhmatweutasny us yAt iartgaedtni rekcehc dluow yllaunitnoc yfirev taht tnatropmi atad stnemges niamer deifidomnutuohguorht .rekce hyctirget neid oec h otrtalim ies rsaelpicni rcpis a sb. teIf illufe sruieht A ataD ytirgetn IrekcehC dluow yfirev taht detceles skcolb fo atad niamer deretltanneuuqesbus ot ,noitpecer ro gnirud yna doirep erehw noitacifidom dluow ton eb .dezirohtua ehTdetcetorp tersnhoaet tsnuioici lhagmuo rnhotih sdaefziroht u danneniaiufi dno emee vbtahh gkicm oaltbad tluser fo a .eruliaf ehT atad ytirgetni rekcehc nac :yfirev )1 detceles atad ;skcolb )2 naeritne ;esabatad )3 a tesbus fo lacitirc atad skcolb taht era tnaem ot niamer ;degnahcnu ro )4 a secio hrcoi rep h ftnooitanibmoc yra mes i maarnipotituc enyxebev iderlbd uroewkc esh ic rhdotofh tneomitacifi refecovi oehhcT .reifilauq dradnatS smhtirogla rof 1-AHS ro 5-DM era elbaliava rof eht nommoc smroftalpfo ,yadot tub eseht thgim eb gni mouostno co-temit eb fo esu ni a .rekcehc A a tyatdirrgeektcneihc dei ftinl epamme iltsphmgiim ,m hhmtc uiissrhekowv cgieelg vhani cathocsteap fhyhfrteciwyrev .daehr elvaonoitatup mwoocl .el pmaxE As an example, consider the operation of a distributed simulation exercise, consisting of a number of military vehicles and weapon systems. Current simulation technology permits the individual vehicle simulation units taking part in an exercise to be remotely located. In order to maintain proper vehicle orientation and status, a packet of information is submitted by each member of the simulation at regularly-spaced intervals. For simulation purposes, a certain data