Multi-Level Wiki (ML Wiki)

Period of Performance: 03/26/2008 - 03/26/2010

$1.6MM

Phase 2 SBIR

Recipient Firm

Trident Systems, Inc.
10201 Fairfax Boulevard Array
Fairfax, VA 22030
Principal Investigator

Abstract

All existing web-based groupware tools lack any provision for multi-level security. Furthermore, the size and complexity of such software makes it extremely unlikely that any potential extensions to support multiple security levels could ever be certified or accredited across clearance levels. Trident Systems proposes to develop a full-scale, certification-ready implementation of a Multi-Level Wiki (ML Wiki) to enable web-based inter-domain information exchanges. The ML Wiki will provide a secure execution environment and safe access to multi-level Wiki web pages, and will mediate between user workstations and the Wiki engine, ensuring that multiple users can collaborate safely and securely on documents with information annotated with multiple levels of security. The ML Wiki will allow users to mark regions of Wiki documents with varying sensitivity level annotations based on the Intelligence Community Standard for Information Security Markings (IC ISM) standard. The ML Wiki will support a restricted form of Extensible Stylesheet Language Transformation (XSLT), for imposing clearance-level specific views upon documents. The ML Wiki targets the Evaluation Assurance Level (EAL) 6 of the Common Criteria, an internationally approved set of security standards, so that it may be used to span at least three clearance levels (Confidential / Secret / Top Secret).