A high assurance cross-domain guard for use in Service-Oriented Architectures

Access to information in a timely manner is becoming more and more important in military operations. This also includes exchange of information between different security domains. Traditionally security domains have been physically separated to avoid loss of confidentiality. Information exchange between domains has been limited to specialized solutions or manual intervention. In this paper we present a prototype guard for use in Service-Oriented Architectures (SOA), providing sufficient flexibility for use with various applications. The prototype guard has been designed to pass a high assurance (CC EAL5) evaluation, thus providing the necessary trust.