Controlled interface: Difference between revisions

Revision as of 14:16, 10 September 2009

Revision as of 23:20, 11 August 2010

Line 1:

A '''controlled interface''' is a [[multilevel security]] system used to transfer low-classification data between security domains. The data to be transferred may theoretically move in either direction; the purpose of the controlled interface is to ensure that the data meets the criteria for transfer. This normally means that the data is of the lower classification. Examples include the [[High Assurance Guard]] and the [http://www.exmeritus.com/hardware_wall.html eXMeritus HardwareWall].

The Committee on National Security Systems (CNSS) publishes the 'NATIONAL INFORMATION ASSURANCE (IA) GLOSSARY', also known as CNSS Instruction No. 4009. In this glossary, a Controlled Interface is defined as follows: "Mechanism that facilitates the adjudication of different interconnected system security policies (e.g., controlling the flow of information into or out of an interconnected system".