Infosec IBM is working with the Cabinet Office to demonstrate one of the first mainstream Mandatory Access Control (MAC) environments. The MAC approach is designed to contain the impact of security breaches, a feature that will give government departments greater confidence in extending government services to the public over the net. The design for the system, which IBM is putting together with its partners Tresys Technology and Belmin Group, is based upon Security Enhanced Linux (SELinux) and IBM WebSphere.

Instead of relying on traditional gateway security technologies such as firewalls, Mandatory Access Control seeks to make sure rogue applications or malicious users are automatically contained and cannot cause damage beyond their immediate context. The proof of concept is planned to go live in May 2006, at County Durham and Darlington Acute Hospitals NHS Trust, and will focus on enabling secure access to an invoicing service, called Belmin’s ARIES (automated reconciliation and invoicing efficiency savings) service, that will replace an existing manual system.

Over time, the MAC approach might be extended to other software environments, according to IBM. "What we've demonstrated here with WebSphere and SELinux can be repeated with other software such as DB2 and business applications. In other words through, with the use of this technology, any organisation will have the ability to contain hackers, provide the necessary confinement for its applications, and minimise damage to the enterprise", said Doc Shankar, world wide Linux security lead for IBM.

IBM unveiled the project during a presentation at the Infosecurity conference in London on Wednesday. ®

Related stories

• Researchers forge secure kernel from maths proofs (17 August 2009)
• Infosec AV firms rubbish MS Vista security claims (27 April 2006)
• Microsoft starts supporting, er, Linux (3 April 2006)
• Homeland Security report tracks down rogue open source code (3 March 2006)
• MS lochs down Scots Police deal (11 August 2005)
• MS wins Isle of Man government IT deal (29 November 2004)
• Use Linux and you will be sued, Ballmer tells governments (18 November 2004)
• Open Source ready for prime time in UK.gov, says OGC (28 October 2004)
• 'Independent' report used MS-sourced data to trash OSS (9 September 2004)
• Er… MS UK sponsors open source deployment workshop (11 February 2004)
• Gates to meet Brown, OGC and NHS chiefs – Sun, OSS in crosshairs? (23 January 2004)
• Newham ditches IBM OSS trial, but goes to extra time with MS price talks (6 January 2004)
• Linux in Munich – Gartner gets retaliation in prematurely? (22 July 2003)