Download View/Open - Calhoun: The NPS

REPORT DOCUMENTATION PAGE
OMB No. 0704-0188
Fonn Approved
Public reporting burden for this collection of information is estimated to average 1 hour per response, including the time for
reviewing instruction, searching existing data sources, gathering and maintaining the data needed, and completing and
reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of
information, including suggestions for reducing this burden, to Washington headquarters Services, Directorate for Information
Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302, and to the Office of
Management and Budget, Paperwork Reduction Project (0704-0188) Washington DC 20503.
1. AGENCY USE ONLY (Leave blank)
3. REPORT TYPE AND DATES COVERED
2. REPORT DATE
December 2000
Master's Thesis
TITLE AND SUBTITLE : Implementation of a HyperText Transfer Protocol
Server on a High Assurance Multilevel Secure Platform
6. AUTHOR(S) Evelyn Louise Bersack
4.
8. PERFORMING ORGANIZATION
7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS(ES)
Naval Postgraduate School
Monterey, CA 93943-5000
9.
SPONSORING
ADDRESS(ES)
I
MONITORING
AGENCY
NAME(S)
5. FUNDING NUMBERS
REPORT NUMBER
AND
10. SPONSORING I MONITORING
AGENCY REPORT NUMBER
NIA
11. SUPPLEMENTARY NOTES The views expressed in this thesis are those of the author and do not reflect the official
policy or position of the Department of Defense or the U.S. Government.
12a. DISTRIBUTION I AVAILABILITY STATEMENT
Approved for public release; distribution is unlimited
12b. DISTRIBUTION CODE
ABSTRACT (maximum 200 words)
In a client/server environment on a local area network (LAN), a server should provide various network applications
including a hypertext transfer protocol (HTTP) server. HTTP is a client/server, request/response application protocol that is
used on the World Wide Web (WWW). It provides the definition and means for transferring objects across internets. A server
used in the context of a multilevel secure (MLS) LAN should be no exception. A MLS LAN should be capable of providing an
HTTP web server that can be used by commercially available web browsers executing on client workstations. This server
needs to be aware of the MLS environment and provide clients access to all web pages and objects for which they are
authorized.
This thesis implements an HTTP web server running on a high assurance host in a MLS LAN. The web server is based on a
commercially available web server application. The commercially available application has been modified and configured to
run on the high assurance host. This thesis discusses the details for implementing the web server on the high assurance host.
The result of this thesis is an HTTP web server application that runs on a high assurance host servicing clients on a MLS
LAN that are using commercially available web browsers. These clients now have the capability of web browsing at varying
levels of classification on one workstation.
14. SUBJECT TERMS Hypertext Transfer Protocol, Web Server, Multilevel Secure, Local Area
Network, High Assurance
15. NUMBER OF PAGES
144
16. PRICE CODE
17. SECURITY CLASSIFICATION
OF REPORT
Unclassified
NSN 7540-01-280-5500
18. SECURITY
CLASSIFICATION OF THIS
PAGE
Unclassified
19. SECURITY
CLASSIFICATIO
N OF ABSTRACT
Unclassified
20. LIMITATION OF
ABSTRACT
UL
Standard Form 298 (Rev. 2-89)
Prescribed by ANSI Std. 239-18