mMLSnet: Multilevel Security Network with Mobility
Mingli Yu, Quinn K. Burke, Thomas La Porta, Patrick Drew McDaniel · 2023
Multilevel security (MLS) network systems regulate data access and impose security policies to prevent unauthorized data disclosure among users of different trust domains. Current MLS network systems are generally based on a static security label configuration and fail to adapt to the dynamic network events such as device movement. In this paper, we introduce mMLSnet, a new MLS network model that can efficiently relabel the network while enforcing security policies. A simple mobility protocol is proposed to support routing of mobile devices. Our evaluation shows that our model can calculate the new flow path and reroute the flows of mobile devices quickly at a modest cost.