第2回 セキュリティ至上主義からセキュリティ市場主義へ 櫻庭 健年 日立製作所 システム開発研究所 Linuxテクノロジ研究部 主任研究員 2007/7/11 歴史的な経緯からセキュアOSは複雑な出自をもっています。第1回で紹介した「至上主義派」と「カジュアル派」という二つの流派、今回はセキュリティ至上主義派の考え方と歴史を基に、その来し方行く末を考えてみたいと思います（編集部） セキュリティ至上主義派の思想の根本は、セキュリティの保証の追求にあると考えられます。今回はセキュリティ至上主義の歴史をひもとくことで、セキュアOSの成り立ち、そしてなぜ思想がぶつかり合うのかを紹介していきたいと思います。 何を守るためのセキュリティなのか？ セキュリティは、守るものの価値によって、かける手間やお金、適用する手段が違ってきます。セキュリティで守るべき最も価値のあるものとは何でしょうか。 歴史的に見て
タグ
- すべて
- .net (4573)
- accounting (382)
- activerecord (329)
- activism (398)
- adobe (3002)
- advertising (466)
- afp (547)
- aist (417)
- al-jazeera (1970)
- alexa (403)
- algorithm (2630)
- amazon (889)
- amazon-ec2 (470)
- amazon-redshift (462)
- amazon-s3 (479)
- amazon-web-services (2875)
- analytics (9648)
- android (985)
- angular (585)
- angular-2 (420)
- angularjs (1318)
- animation (425)
- anime (479)
- apartment (326)
- api-management (355)
- apple (1141)
- application (456)
- architecture (505)
- arrest (392)
- ars-technica (1810)
- art (10118)
- art-auction (576)
- artificial-intelligence (472)
- artificial-neural-network (2536)
- asahi (1807)
- atlantic (1034)
- atmarkit (3777)
- audio (680)
- australia (498)
- authentication (719)
- automobile (497)
- aws-lambda (422)
- bank-of-japan (1487)
- banks (627)
- barack-obama (852)
- bbc (20752)
- biennale (776)
- biology (5065)
- bitbucket (512)
- bitcoin (335)
- blockchain (1191)
- blog (1328)
- bloomberg (14786)
- books (3135)
- buddhism (382)
- business-promotion (1154)
- c (384)
- c# (628)
- c++ (912)
- c-family-programming-language (4913)
- cabinet-office (5193)
- cakephp (366)
- california (3262)
- canada (743)
- carnegie-mellon-university (511)
- cascading-style-sheets (909)
- central-processing-unit (2411)
- channel-9 (786)
- charles-murray (610)
- chatbot (607)
- chiba (656)
- child-development (1313)
- china (4558)
- chunichi-shimbun (428)
- circleci (349)
- city (342)
- classmethod (912)
- cloud-computing (598)
- cluster-analysis (2276)
- cluster-manager (1786)
- cnet (383)
- cnn (2880)
- comfort-women (358)
- comic (391)
- commentary (413)
- commodity-market (657)
- communication (411)
- community-building (7369)
- company (5057)
- compiler (346)
- concurrent-computing (3387)
- connecticut (481)
- connpass (1322)
- conservatism (425)
- construction (4490)
- content-generating (484)
- continuous-integration (713)
- cornel-university (422)
- creative (885)
- crime (1739)
- criminology (1621)
- critic (563)
- d3.js (389)
- daiwa-institute-of-research (767)
- data-mining (388)
- data-processing (362)
- data-structure (4675)
- data-visualization (2452)
- data-warehouse (453)
- database (5619)
- death (2153)
- deep-learning (1892)
- dentsu (352)
- department-of-commerce (3976)
- design (638)
- diplomat-magazine (344)
- docker (3582)
- documentation (859)
- domain-name-system (442)
- dpj (550)
- e-book (720)
- e-learning (330)
- earthquake (524)
- ec (1128)
- economic-growth (2476)
- economics (367)
- economist (1933)
- education (986)
- elasticsearch (374)
- electronica (2791)
- elixir (5936)
- emacs (1432)
- email (383)
- employee-business (632)
- employment (784)
- energy (743)
- energy-policy (1126)
- english (589)
- entertainment (688)
- environmental-policy (5773)
- erlang (3348)
- ethereum (557)
- event (697)
- examination (2942)
- facebook (4029)
- file-system (325)
- film (757)
- finance (626)
- financial-times (2289)
- firebase (331)
- fiscal-policy (437)
- fiscal-problem (321)
- food (1330)
- forbes (1881)
- forecasting (2302)
- foreign-affairs (541)
- foreign-exchange-market (1888)
- fortune (890)
- fox (355)
- france (819)
- fraud (473)
- fukushima (341)
- functional-comparison (707)
- game (1495)
- general-election (426)
- germany (526)
- gerontology (572)
- git (490)
- github (23047)
- globis (1552)
- go (2512)
- google (3999)
- google-chrome (1036)
- google-cloud (1599)
- google-play (338)
- government (619)
- graphql (1030)
- guardian (5653)
- guide (1386)
- gun-violence (398)
- hacker-news (343)
- harvard-university (881)
- hatelabo-anonymousdiary (364)
- hatena-bookmark (36533)
- havard-business-review (767)
- health (642)
- healthcare-industry (1485)
- heroku (969)
- hong-kong (545)
- house-of-councillors (357)
- housing (698)
- html (5463)
- http-server (349)
- huffington-post (630)
- hypervisor (476)
- ict (2397)
- ieice (358)
- impress (1275)
- impression-management (553)
- india (769)
- infrastructure-as-a-service (762)
- installation (680)
- intel (1345)
- intelligent-agent (1079)
- interview (535)
- investment (577)
- ios (581)
- ipa (1851)
- iphone (694)
- italy (918)
- itmedia (574)
- itochu-techno-solutions (324)
- japan (3146)
- japan-china-disputes (766)
- japan-korea-disputes (845)
- japan-research-institute (401)
- java (2749)
- javascript (11505)
- jazz (689)
- jiji-press (1544)
- jil-pt (568)
- jpcert (586)
- jquery (375)
- json (405)
- jst (1645)
- kenplatz (3458)
- keras (385)
- kernel (1333)
- kickstarter (641)
- korea (716)
- kubernetes (2175)
- kyoto-university (480)
- la-biennale (702)
- labor-economics (10208)
- language-model (611)
- laravel (720)
- law (566)
- ldp (1205)
- liberalism (638)
- libertarianism (765)
- library (701)
- line (515)
- link-building (422)
- linux (6500)
- local-government (7638)
- log-management (557)
- los-angels-times (828)
- lpi (829)
- machine-learning (8522)
- macos (450)
- mainichi (750)
- manga (390)
- market-research (2615)
- market-trend (9929)
- marketing (717)
- massachusetts (2960)
- mathematics (543)
- media (1616)
- media-art (419)
- media-manipulation (357)
- medical (760)
- meditation (484)
- medium (3164)
- meetup (2134)
- microsoft (3490)
- microsoft-azure (513)
- microsoft-developer-network (949)
- middle-east (1722)
- military (1051)
- ministry-of-economy (3889)
- ministry-of-education-culture (1010)
- ministry-of-finance (467)
- ministry-of-internal-affairs (976)
- ministry-of-land (400)
- ministry-of-welfare (12471)
- mit (2351)
- mitt-romney (692)
- mobile (601)
- mobile-app (1039)
- mobile-application-development (3567)
- module-loader (628)
- monetary-policy (2946)
- morphological-analysis (353)
- movie (19475)
- mozilla (1204)
- murder (784)
- museum (563)
- music (5931)
- mysql (1349)
- national-diet-library (4392)
- national-institute-of-health (4982)
- national-library-of-medicine (4914)
- national-vulnerability-database (3870)
- natural-language-processing (566)
- ncbi (4837)
- network (469)
- network-engineering (1132)
- neuroscience (784)
- new-york (525)
- new-york-times (5423)
- new-yorker (689)
- newsweek (1085)
- nginx (793)
- nhk (4059)
- nikkei (1470)
- nikkei-bp (4160)
- nist (3973)
- nli-research-institute (1292)
- node.js (3247)
- nomura-research-institute (448)
- nosql (688)
- note (397)
- novel (321)
- npm (334)
- npr (1560)
- ntt-data (485)
- nu-jazz (343)
- nuclear-power (517)
- nuclear-power-phase-out (691)
- nvidia (431)
- ocaml (1076)
- online-advertising (363)
- openstack (515)
- oracle (351)
- organization (1476)
- oricon (3215)
- os-level-virtualization (3219)
- osaka (717)
- package-management (509)
- paleolibertarianism (597)
- pandas (592)
- pathology (6079)
- pennsylvania (495)
- people (5632)
- peoples-daily (1524)
- performance-engineering (664)
- perl (703)
- personal-development (521)
- peter-thiel (335)
- phoenix-framework (892)
- photo (1169)
- php (2857)
- physiology (2533)
- platform-as-a-service (4290)
- plugins (1056)
- police (715)
- politics (3358)
- postgresql (1599)
- powershell (1156)
- presidential-election (551)
- privacy (802)
- product-hunt (368)
- productivity (889)
- programming (606)
- programming-language (369)
- prtimes (1281)
- psychology (546)
- public-company (632)
- public-health (458)
- pubmed.gov (4835)
- python (4904)
- qiita (14696)
- qualcomm (986)
- qualcomm-snapdragon (864)
- quora (366)
- radiation-poisoning (583)
- rakuten (699)
- ranking (393)
- rape (430)
- raspberry-pi (1338)
- rdbms (1645)
- react (787)
- react-native (1929)
- real-estate (1073)
- real-estate-economics (5495)
- recruit (864)
- reddit (411)
- redis (438)
- reference (986)
- religion (889)
- remote-procedure-call (414)
- research (1635)
- researchmap (1093)
- reuters (6154)
- review (1636)
- rieti (403)
- ril (1638)
- robotics (837)
- rspec (666)
- ruby (11856)
- ruby-family-programming-language (8523)
- ruby-on-rails (6540)
- rubyflow (1739)
- rumor (573)
- russia (1089)
- rust (1524)
- saatchi-art (436)
- sankei (2271)
- scala (1386)
- scikit-learn (338)
- search-engine (931)
- security (1105)
- security-engineering (3571)
- security-management (946)
- senkaku-islands (716)
- seo (4738)
- serps (346)
- services (3825)
- sexology (1598)
- shinzo-abe (710)
- single-board-computer (1245)
- slideshare (437)
- smart-city (416)
- smart-contract (477)
- smartphone (898)
- social-media (496)
- social-media-marketing (1304)
- sociology (1348)
- software (1220)
- software-debugging (517)
- software-deployment (1664)
- software-design-pattern (689)
- software-engineering (3070)
- software-testing (2592)
- sothebys (355)
- soundcloud (491)
- space (356)
- speaker-deck (1899)
- sports (427)
- stack-overflow (7077)
- stanford-university (1663)
- statistics (1098)
- steelmaking (623)
- stock-market (880)
- stress-management (600)
- structured-query-language (399)
- style-sheet-language (421)
- suicide (327)
- summer-olympic-games (351)
- swift (867)
- swiss (408)
- syria (382)
- tax (387)
- tax-law (566)
- techcrunch (628)
- ted (575)
- teikoku-data-bank (585)
- telegraph (2135)
- television (551)
- temporary-work (385)
- tensorflow (1529)
- tepco (321)
- thesis (687)
- think-tank (11865)
- til (349)
- time (1886)
- titanium-mobile (604)
- tokyo (1684)
- tokyo-shoko-research (649)
- tools (5907)
- toru-hashimoto (357)
- tourism (648)
- travel (457)
- trend-micro (541)
- trial (738)
- trouble (1241)
- typescript (1111)
- ubuntu (641)
- uc-berkeley (1018)
- ucla (560)
- unit-testing (654)
- united-kingdom (2251)
- united-nations (476)
- unity (2267)
- university (2298)
- university-of-oxford (443)
- unsupervised-learning (2116)
- usa (16031)
- usa-today (775)
- value-added-tax (355)
- video-game-development (2319)
- videonews (418)
- vimeo (848)
- violence (514)
- virtualbox (321)
- wall-street-journal (1199)
- washington-post (895)
- weather (465)
- web-analytics (460)
- web-api (2528)
- web-based-application-framework (2082)
- web-creative (334)
- web-design (372)
- web-service (2082)
- webpack (590)
- welfare (652)
- windows (3484)
- windows-10 (407)
- wired (697)
- womens-work (498)
- wordpress (516)
- workflow-management-system (1331)
- world-economic-forum (558)
- x (3156)
- xamarin (1244)
- xamarin.forms (466)
- xml-master (767)
- yahoo-textream (525)
- yale-university (456)
- yomiuri (1834)
- youtube (4164)
- zoology (1128)
- hatena-bookmark (36533)
- github (23047)
- bbc (20752)
- movie (19475)
- usa (16031)
- bloomberg (14786)
- qiita (14696)
- ministry-of-welfare (12471)
- think-tank (11865)
- ruby (11856)
trusted-computing-baseに関するnabinnoのブックマーク (4)
-
nabinno 2023/11/26
- itmedia
- taketoshi-sakuraba
- hitachi
- tcsec
- security-kernel
- reference-monitor
- trusted-computing-base
- security-engineering
- central-processing-unit
リンク -
セキュリティ至上主義からセキュリティ市場主義へ － ＠IT
第2回 セキュリティ至上主義からセキュリティ市場主義へ 櫻庭 健年 日立製作所 システム開発研究所 Linuxテクノロジ研究部 主任研究員 2007/7/11 セキュリティの証明に向けた取り組み 米国では、OSのセキュリティの証明を実行しようとしてきました。そのために、1970年代から80年代にかけて、証明可能なOS（Provably Secure OS）、すなわち、証明できるようにOSのアーキテクチャと仕様を設計する、という研究が行われました。 これを踏まえて、TCSEC（1983、1985）のA1レベルの認証では、ラベル制御や強制アクセス制御（MAC）といった機能の実装とともに、それらの設計に欠陥がないことを数学的に証明することを求めています。 TCSECが世に出たころに政府主導でA1レベル汎用OSを目指して開発されたLOCK（Logical Coprocessing Kernel）で
-
-
Trusted computing base - Wikipedia
This article reads like a textbook. Please improve this article to make it neutral in tone and meet Wikipedia's quality standards. (February 2020) The trusted computing base (TCB) of a computer system is the set of all hardware, firmware, and/or software components that are critical to its security, in the sense that bugs or vulnerabilities occurring inside the TCB might jeopardize the security pr
-
1
公式Twitter
- @HatenaBookmark
リリース、障害情報などのサービスのお知らせ
- @hatebu
最新の人気エントリーの配信
処理を実行中です
キーボードショートカット一覧
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
設定を変更しましたx