2006/07/25 · 12:05

Steve Riley on mandatory integrity control

Steve Riley has a great blog post on mandatory integrity control (MIC) in Windows Vista. MIC is an old concept I fondly remember the old Multics machine that USL had; Multics was one of the first machines to implement MIC in any meaningful way. Anyway, the Vista implementation of MIC is pretty interesting; read Steve’s blog to find out more.

2 Comments

Filed under Security

2 responses to “Steve Riley on mandatory integrity control”

  1. Tom Van Vleck's avatar Tom Van Vleck
    2006/09/10 at 09:08

    More information on Multics is at http://www.multicians.org. But Multics had mandatory access control (MAC), not mandatory integrity control. As Ken Biba pointed out, the two are in some sense dual. MAC tries to prevent secrets from being written to non-secret containers, but does not restrict “write up.” MIC tries to prevent writes to protected objects by untrusted subjects. See
    http://www.multicians.org/security.html
    for a good story.

  2. Paul Robichaux's avatar Paul Robichaux
    2006/09/12 at 10:25

    Thanks for the correction, Tom!