As part of an on-going coordination activity between DARPA/ITO and the National Computer Security Center (NCSC) on operating systems security research, the Operating Systems Security Working Group (OSSWG) of the DARPA/NSA/DISA Joint Technology Office (JTO) has drafted this list identifying a number of challenging problems in end system security. Comments, suggested modifications, and amendments to the list are welcome.

A combined version of the challenges with their descriptions, suitable for printing, is also availalble.

TECHNOLOGY-SECURITY INTERPLAYS

• Security Implications of New OS Paradigms
• Secure Distributed Computing
• Integration of Security and Fault Tolerance

---

SECURITY POLICY

• Controlled Sharing among Domains with Different Security Policies
• Authorization and Access Control Frameworks

---

ASSURANCE

• Integrated Operating System and Application Assurance
• Assurance Metrics
• Assurance Methods and Tools

---

NETWORK-OS INTERACTION

• Interfacing to and Selecting Security Protocols
• Validation of the Enclave Model of Security
• Security Information Management

---

RISK REDUCTION

• Meshing Prevention and Detection Strategies
• Rapid Prototyping of OS Concepts
• Software Cryptography (under construction)