APPAREL Architecture will unveil its new branch of furniture APPAREIL Atelier during the 15th edition of souk @ sat. From November 28 to December 2, the Society of Technological Arts (SAT) will host a design market where local designers will present their novelties. Taking advantage of this creative gathering, APPAREIL Architecture will present its collection of FLOE chairs, its new HETA tables as well as its original DOLI hooks.
Its unique look revisits the aesthetic of 50s furniture while steeping itself in a touch of modernity all its own. FLOE is thus available in three formats designed to suit the needs of different spaces: standard, lounge, and stool. A skilful balance between steel's rigidity and wood's suppleness defines the chair's shape. Its stability is ensured by square steel stems that contrast with fitted plywood that seems to float above the structure. The arrangement of these elements projects a character that is sculptural while simultaneously giving an impression of lightness.
The Heta table is distinguished itself by the balance of its straight lines and its trays with rounded surfaces. Offering an elegant alternative to the classic coffee table, its unusual structure gives it a unique aesthetic while ensuring great stability. The detail of its construction also allows to be easily transported from one room to another.
These hooks offer a playful touch with their geometric shapes and distinctive assemblage details. While functional, their unique aesthetic allows a multitude of configurations to decorate the walls.
APPAREIL Atelier, new branch of the APPAREIL Architecture firm, is a creative and colourful studio, where ideas burgeon and projects materialize. Composed of architects, technologists, and industrial designers, this multi-disciplinary team wishes to fulfil innovative mandates where the different levels intersect.


text:
Q: Why authentication works in some browsers but not in others My app is on Azure AD and I'm using the following code to request authentication on the Auth Service:
HttpContext.GetOwinContext().Authentication.Challenge(new AuthenticationProperties { RedirectUri = "/Home/Index" }, WsFederationAuthenticationDefaults.AuthenticationType);
What happens is that this works in some browsers (there is no pattern) and sometimes it doesn't work in others.
When the application redirects to /home/index, sometimes the object User.Identity has the user's email but sometimes it has no information.
Why is this happening?

A: Seamless SSO doesn't work in private browsing mode on Firefox and Microsoft Edge browsers. It also doesn't work on Internet Explorer if the browser is running in Enhanced Protected mode.
For SSO implementation , please consider browser consideration doc published here
As per last update , here is supporting browser list
Mozilla Firefox (all platforms)
Mozilla Firefox doesn't automatically use Kerberos authentication. Each user must manually add the Azure AD URL to their Firefox settings by using the following steps:

*

*Run Firefox and enter about:config in the address bar. Dismiss any notifications that you see.

*Search for the network.negotiate-auth.trusted-uris preference. This preference lists - - Firefox's trusted sites for Kerberos authentication.

*Right-click and select Modify.
Enter https://autologon.microsoftazuread-sso.com in the field.

*Select OK and then reopen the browser.

Safari (macOS)
Ensure that the machine running the macOS is joined to AD. Instructions for AD-joining your macOS device is outside the scope of this article.
Google Chrome (all platforms)
If you have overridden the AuthNegotiateDelegateWhitelist or the AuthServerWhitelist policy settings in your environment, ensure that you add Azure AD's URL (https://autologon.microsoftazuread-sso.com) to them as well.
Google Chrome (macOS and other non-Windows platforms)
For Google Chrome on Mac OS and other non-Windows platforms, refer to The Chromium Project Policy List for information on how to whitelist the Azure AD URL for integrated authentication.
The use of third-party Active Directory Group Policy extensions to roll out the Azure AD URL to Firefox and Google Chrome on Mac users is outside the scope of this article.
Hope it helps.

redpajama_set_name: RedPajamaStackExchange


Africa's regional integration challenges are well known. Intra-African trade is the lowest globally – approximately 15 percent compared to 54 percent in the North America Free Trade Area, 70 percent within the European Union and 60 percent in Asia. The continent's difficult physical landscape makes connection between communities, countries, and even entire regions challenging.
There is also very limited integration of regional markets for infrastructure services, particularly in power, energy, water and sanitation. This is further complicated by weak regional economic communities (RECs) that lack capacity and are poorly structured to make or even attract necessary regional investments. This is especially significant for fragile countries, as they stand the most to gain from greater integration. Many of their governments have also not worked enough with the private sector and others to develop and upgrade regional infrastructure; improve policies for industries that fit the productive capabilities of countries in Africa (for example, in agriculture and food security); and fully implement protocols of the RECs that governments have signed.
In line with the TYS, the Bank's Group Regional Integration Policy and Strategy, approved by the Board in 2014, acknowledges the opportunities provided by regional integration in boosting infrastructure, trade, industrialization and the movement of people. As part of its mandate, the Bank Group continues to lead in several continental wide initiatives targeting both "hard" and "soft" infrastructure (e.g. trade and services facilitation policies and instruments). These initiatives are, among others: i) the Continental Free Trade Area, ii) CAADP, iii) PIDA, and iv) the Boosting Intra-African Trade agenda.
The Integrate Africa priority will be mainstreamed across the other High 5s and the Bank will fast-track the regional integration continental agenda for which several of the agreed programs are already in place. The Bank will scale up its investments in infrastructure development, as expressed in the PIDA program, for example through the development of regional power markets and brokering and coordinating regional infrastructure projects. The Bank will work with other stakeholders to assist in strengthening RECs and national authorities to encourage and support regional 'soft' infrastructure sector integration, cross-border investments, elimination of non-tariff trade barriers, the harmonization of investment and engineering codes, and quality assurance and certification standards.
The Bank will also work to deepen Africa's financial system including operations to promote robust market-based monetary systems. The Bank will continue to promote initiatives to improve Africa's financial infrastructure including collateral registries, credit bureaus, credit ratings, and payment and settlement systems, all of which are necessary to foster financial stability and the successful operation of modern integrated financial markets. Helping countries lift market access barriers, formalizing women's participation in cross-border trade and other regional initiatives, and scaling up intra-African trade, supporting regional agricultural value chains, and promoting the movement of people through changes in the visa regime will all contribute towards increased productivity and economic activity.
Regional integration is critical for expanding the size of our markets. We must integrate Africa – grow together, and develop together. Our collective destiny is tied to breaking down the barriers separating us.


text:
Home » New Hampshire bakery teaches while it feeds
New Hampshire bakery teaches while it feeds
By Brian Amick
Image courtesy of Love + Flour Bakery
Love + Flour Bakery in Salem, New Hampshire is teaching its customers how to bake, while also selling them macaroons, cupcakes, cookies, and cakes.
Owner Jaime Manning hosts baking classes on Monday through Wednesday. Then, she sells baked goods Thursday through Sunday.
"The classes have been a huge hit. The macaroon class sells out every month," Manning tells The Eagle-Tribune. "But almost always, people come back and say that it's too hard to do regularly. And macaroons are an expensive item to make, people who only want one or two will just come and buy them. In the long run, it's not really taking away from our business."
Manning was a head baker at Whole Foods and McKinnon's Market before deciding to open her own store in the fall of 2016. She was never formally trained, but she wants to pass along the knowledge she's gained over the years to a new crop of baking enthusiasts.
She teaches several different classes, including kids and pre-teen baking series, an adult cake series, a French macaroons workshop, a cupcake decorating workshop, and a fun with fondant workshop. Love + Flour's class prices range from $45 to $260, depending on the class and length of curriculum. Dates and times can be found at Love + Flour's Facebook page.
SLIDESHOW: Wolfeboro, New Hampshire's Yum Yum Shop
World's longest candy counter resides in small New Hampshire town
Former nurse feeds healthcare workers through Kansas City bakery
How to Cake It launches new spatula that can clean mixer bowls and paddles
Netflix show 'Nailed It!' wants you to bake your selfie in new contest

redpajama_set_name: RedPajamaCommonCrawl


text:
Report Research
WIC Participation
Effects of the Special Supplemental Nutrition Program for Women, Infants, and Children (WIC): A Review of Recent Research
By Colman S, Nichols-Barrer I, Redline J, Devaney B, Ansell S, Joyce T
This report begins with an overview of the WIC program, including its administrative structure and benefits, and a detailed description of the literature search protocol used to identify the studies included.
Contractor: Mathematica Policy Research
This research was funded by the USDA Food and Nutrition Service.
Colman S, Nichols-Barrer I, Redline J, Devaney B, Ansell S, Joyce T (2012) Effects of the Special Supplemental Nutrition Program for Women, Infants, and Children (WIC): A Review of Recent Research. United States Department of Agriculture, Food and Nutrition Service, Office of Research and Analysis. Available online: https://www.fns.usda.gov/effects-special-supplemental-nutrition-program-women-infants-and-children-wic-review-recent-research
Targeted Text Message Outreach Can Increase WIC Enrollment, Pilots Show
Targeted text messaging offers a promising option for reaching more families eligible for WIC, as…
Matching Data Across Benefit Programs Can Increase WIC Enrollment
This report: - Details the importance of connecting Medicaid and SNAP participants to WIC; -…


Preliminary rainfall measurements from Hawaiʻi over the last four days, associated with former Hurricane Lane have produced the "third highest storm total rainfall from a tropical cyclone in the US since 1950," according to information compiled by Chis Jacobson, senior forecaster with the National Weather Service in Honolulu.
On Maui, the greatest rainfall totals were at West Wailuaiki (between Keʻanae and Nāhiku) in East Maui where more than 24 inches fell over four days, followed by Puʻu Kukui (Mauna Kahalawai) in the West Maui Mountains where nearly 15 inches were reported over the same period.
According to preliminary data, the greatest rainfall totals were in Mountain view on Hawaii Island where 51.53 inches of rain fell over the period. That's the third highest total (subject to final quality control) on record for a tropical cyclone in the US behind No. 1 Nederland, Texas during Hurricane Harvey in 2017, which had more than 60 inches; and No. 2 Kanalo Huluhulu Ranger Station at Kōkeʻe on Kauaʻi during Hurricane Hiki in 1950 that dumped 52 inches at the location.
The data include preliminary rainfall totals covering the period from noon HST on Wednesday, Aug. 22 through 4 a.m. HST on Sunday, Aug. 26, 2018.


41-45 High Bridge in centre of Bigg Market.
Every day 11am - 2am.
Camden Helles, Mordue, D'achouffe, Almasty Pomegranate Ale, Moretti, Timmermans, Erdinger, Vedett and Guinness on tap. Symonds cider also on offer. 6 cask ales available. An extensive selection of bottled beers (see menu for selection), wines, cocktails, whiskies, gins and spirits available.
An underground cocktail bar called The Viceroy is popular later in the evening - See Viceroy Drinks Menu.
Food served daily with a choice of while you wait £2.00 - £3.00, lindisfarne oysters 2 for £7.00, 6 for £13.00 or 12 for £19.00, starters £6.00 - £14.00, main courses £13.00 - £24.00, home comforts £13.00 - £15.00, sandwiches £8.00 - £9.00, steaks £17.00 - £26.00, sharing £34.00 - £69.00, sides £4.00.
Desserts £5.00 - £7.00. Northumberland Cheese board £9.00.
Sunday Lunch menu with 2 courses £19.00 or 3 courses £23.00. Sunday Roasts £10.00 - £19.00.
Lunch/Theatre menu Monday - Friday from 12pm - 7pm with two courses for £13.00 or 3 courses for £15.00.
100 cover restaurant with head chef David Kennedy.
Make a booking for a table.
Lunchtime deal of soup and a sandwich for £10.00 Monday - Friday from 12pm - 4pm.
Martini Lunch from 12pm - 3pm every day with 2 grazing boards and 2 cocktails £20.00 or 12 items for £25.00.
High Bridge Gin Club from 4pm - 7pm Sunday - Thursday with 2 cocktails for £12.00.
Every day craft and cask ale flights of one/thirds (cask ales 3 x one/third for £4.00 or craft kegs 3 x one/third for £6.00).
Music: Regular music on play at most times - a DJ is a regular feature on a Friday and Saturday.
Popular High Bridge bar that was formerly known as The Lane. The bar which opened its doors on 31st May 2013 is described as a Gin Draft Eatery.
The place very stylish and is decked out with modern fixtures and fitments, exposed brickwork and pipework to the ceiling. There is a long bar to the left of the main entrance with low drop down lighting over the bar.
There is plenty of seating throughout for diners with a separate area to one side of the bar. The glass fronted doors to the front of the bar open out which makes the place bright and airy during the day.
The bar has now been extended with the opening of a new 100 cover restaurant and underground cocktail bar - The Viceroy. The restaurant is under the diection of head chef - David Kennedy.
Regular music on play at most times - a DJ is a regular feature on a Friday and Saturday.
There is an outside area to the rear which is used for smokers.
Disabled access is good to the main bar Toilets which are downstairs are smart and clean.


text:
Sit, Stand, Lay
To overview Improv Exercises Improv Exercises#Perception Improv Exercises#Slapstick-Bustle-Action
location, conflict, characters as necessary
Within the provided framework of the location and conflict, the actors must build a scene with an important twist: at all times, one actor must be sitting, one must be standing, and one must be lying down. If one changes positions, the others must change as well, but the key is that there must be motivation behind each move. For example, at a campsite, one actor might be sitting by the fire, one standing near the tent, and one laying down on a bedroll. The sitter might stand and say "Wow, would you look at the stars," the stander might pretend to be bitten by a snake and fall to the ground so that the layer will sit to tend to the snake bite.
Provide locations and conflicts that lend themselves to movement. Three characters in a church service might be a comedic challenge, but if it doesn't generate laughs, it's dead. Try to pick suggestions such as working on a car, inspecting a factory, building a scaffold, etc., wherein the actors must move as a result of the scene. This will be much more natural and funnier as the actors can concentrate more on improving than trying to come up with reasons to move.
One fine day in Canada, a chair gets fixed, pancakes are served, and a man meets his untimely demise.
by Maitti Showhopper
05.02.2014 | helios
german version > Sitzen Stehen Liegen


text:
Mountain Shire: Books & Gifts
by Jennifer Swift
Miriam's book reviews
BOOK REVIEW #1
by Leigh Bardugo
Kaz Brekker, youthful, influential and powerful criminal mastermind, is given a once in a lifetime offer he can't refuse: an impossible heist. Naturally, Brekker accepts the offer and begins to recruit a team mostly consisting of fellow criminal misfits with top notch skill sets such that include assassins, spies, thieves and more. Of course, the team has one outlier, the innocent and unknown runaway.
This team, full of colorful characters, unique in their own skill sets and personalities, set out to accomplish the impossible. One can't help but root for this criminal team as they learn to trust one another, logistically plan the impossible, travel to new territories, fight the unknown in an attempt to execute the heist to the best of their abilities, despite all the unknowns and obstacles they encounter along the way. This book, with chapters told from each criminal's point of view, is excellently told and enrapturing from the very beginning.
The Sweetness at the Bottom of the Pie
By Alan Bradley
Set in the 1950's English countryside, Flavia de Luce, a brilliant 11-year-old chemist and amateur sleuth, sets out to clear her father's name from accusations of murder. The unstoppable Flavia calls upon her tenacity and extreme wit to undertake this investigation by interviewing suspects, researching clues and ultimately beating the police department to the resolution of the case at hand.
Bradley has the unique ability to make the reader laugh, learn and ultimately fall in love with the precocious and tenacious Flavia; a girl full of clever witticisms, a scientific mind and a talent for infuriating her older sisters with her clever tact for sabotage and pranks. The journey of the Sweetness at the Bottom of the Pie and Bradley's subsequent Flavia de Luce novels will leave you wanting more and laughing throughout the entire journey.
by Delia Owens
"Out here, in the real remote, she was free to wander, collect at will, read the words, read the wild. Not waiting for the sounds of someone was a release. And a strength." "Where the Crawdads Sing," by Delia Owens is a modern-day masterpiece. Descriptive and informative, this story will give you a fresh perspective on nature, our environment, and what truly matters most in this world.
Caste: The Origins of Our Discontents
by Isabel Wilkerson
Caste: The Origin of Our Discontents by Isabel Wilkerson is the first ever nonfiction book to receive best book of the year and was also named the #1 book of 2020 in all genres.
Painfully thought provoking and revelatory, Wilkerson, provides a transparent analysis of the United States and the caste system it was built upon. Wilkerson brings to light how the United States of America was founded upon the dehumanization of humans as slaves and the absurd and erroneous ranking system of humans based upon looks. Wilkerson illuminates and compares the similarities of the caste systems of Nazi Germany, India, and in the United States.
Shocking revelations from Caste:
• The United States' template of slavery was studied by Nazi Germans and was used as a template for their atrocities committed overseas during World War II.
• Currently, there are over 1,700 monuments to the Confederacy throughout the United States.
• Throughout Europe, there are over 70,000 memorials to the Holocaust victims representing a clear divide between the United States' response to the atrocities committed and the atrocities committed on foreign soil.
Overall, this book left me dumbfounded and consumed with disgust regarding the history of our country, its current state, and the daily discrimination people of color experience in our country.
"God will not hold us guiltless. Not to speak is to speak. Not to act is to act."
"It is a fake crown that we wear, he came to realize. He wished every dominant-caste person could awake to this fact. My message would be to take off the fake crown. It will cost you more to keep it than to let it go. It is not real. It is just a marker of your programming. You will be happier and freer without it. You will see all of humanity. You will find your true self." – Wilkerson pg. 364


A trusted computer system that offers Linux® compatibility and supports contemporary hardware speeds. It is designed to require no porting of common applications which run on Linux, to be easy to develop for, and to allow the use of a wide variety of modern development tools. The system is further designed to meet or exceed the Common Criteria EAL-5 or higher rating through incorporation of required security features, as well as a very high level of assurance for handling data at a wide range of sensitivity (e.g., classification) levels in a wide range of operational environments. This is achieved through the implementation of a well-layered operating system which has been designed from the ground up to enforce security, but which also supports Linux operating system functions and methods.
20060069925 Content processing device, content accumulation medium, content processing method and content processing program March, 2006 Nakai et al.
20090259345 OPERATIONS MANAGEMENT METHODS AND DEVICES THEREOF IN INFORMATION-PROCESSING SYSTEMS October, 2009 Kato et al.
20090271637 INFORMATION PROCESSING TERMINAL AND STATUS NOTIFICATION METHOD October, 2009 Takekawa et al.
20100058074 RIGHT INFORMATION ENCRYPTION MODULE, NONVOLATILE MEMORY DEVICE, RIGHT INFORMATION RECORDING SYSTEM, RIGHT INFORMATION DECRYPTION MODULE, RIGHT INFORMATION READING SYSTEM, AND RIGHT INFORMATION RECORDING/READING SYSTEM March, 2010 Sakurai et al.
20090217028 METHOD OF ADDING A POSTSCRIPT MESSAGE TO AN EMAIL August, 2009 Khan et al.
1. A trusted operating system comprising: an application domain, in which trusted and untrusted applications can be executed; an operating system services layer, wherein the operating system services layer provides interfaces allowing applications written for at least one other operating system to be run in the trusted operating system, whereby the operating system services layer emulates the at least one other operating systems; a trusted system services layer; and, a security kernel, for enforcing system security policy and integrity rules, and for providing basic operating system services, including facilitating user and administrator actions.
2. The trusted operating system of claim 1, wherein the operating system utilizes multi-domain process isolation capabilities in the hardware on which the operating system is running to ensure process isolation.
3. The trusted operating system of claim 2, wherein the hardware multi-domain process isolation capability restricts access to segments, pages, and instructions.
4. The trusted operating system of claim 3, wherein the hardware multi-domain process isolation capability also provides multiple checks for protections violations within memory references.
5. The trusted operating system of claim 1, wherein the application domain allows at least one development environments to be run.
6. The trusted operating system of claim 5, wherein the development environment is an integrated development environment.
7. The trusted operating system of claim 1, wherein the kernel layer enforces mandatory security, mandatory integrity, and subtype control within the trusted operating system.
8. The trusted operating system of claim 1, wherein the security kernel separates users and data by enforcing mandatory security and mandatory integrity access controls.
9. The trusted operating system of claim 8, wherein the trusted operating system further separates users and data by enforcing discretionary access controls.
10. The trusted operating system of claim 9, wherein the trusted operating system separates administrator and operator roles using an integrity policy.
11. The trusted operating system of claim 10, wherein the trusted operating system enforces the principle of least privilege for administrator and operator roles.
12. The trusted operating system of claim 8, wherein the user and administrator actions are audited in at least one audit log.
13. The trusted operating system of claim 12, wherein at least one audit log is protected from modification.
14. The trusted operating system of claim 13, wherein all audit logs are protected from modification.
15. The trusted operating system of claim 1, wherein user login failures are monitored to detect the accumulation of events that indicate an imminent security policy violation.
16. The trusted operating system of claim 1, wherein the security kernel allows users with different clearances to simultaneously store and process information that exists at different classification levels.
17. The trusted operating system of claim 16, wherein the security kernel allows the user to process data only when that data is at the user's integrity level or a higher integrity level.
18. The trusted operating system of claim 1, wherein the trusted software includes trusted databases.
19. The trusted operating system of claim 1, further comprising a Reference Monitor.
20. The trusted operating system of claim 1, wherein the security kernel enforces process isolation to keep untrusted software from accessing working data associated with trusted software processes.
21. The trusted operating system of claim 1, wherein at least one of the at least one other operating systems emulated by the operating system services layer is Linux.
22. The trusted operating system of claim 1, wherein the operating system services layer further provides at least one proprietary API to manage and use trusted aspects of the trusted system services layer.
23. The trusted operating system of claim 22, wherein the operating system services layer translates API calls into trusted operating system primitives provided by the security kernel and trusted system services layers.
24. The trusted operating system of claim 1, wherein applications operating in the application domain can interface with only the operating system services layer, and cannot call functions provided by the trusted system services or kernel layer directly.
25. A trusted computer system comprising: at least one processor, wherein each of the at least one processors supports a multi-domain architecture; at least one terminal, for facilitating operation of the trusted computer system; at least one data storage unit; at least one memory unit; and a secure operating system running on the trusted computing system, wherein the secure operating system utilizes the multi-domain architecture of the at least one processor to enforce process isolation.
26. The trusted computer system of claim 25, wherein the at least one processor is an Intel Pentium class microprocessor.
27. The trusted computer system of claim 25, wherein the at least one data storage unit is a hard drive.
28. The trusted computer system of claim 25, wherein the at least one memory storage unit is Random Access Memory.
29. The trusted computer system of claim 25, further comprising at least one network interface.
30. The trusted computer system of claim 25, further comprising a Secure Attention Key.
31. A security policy enhancement system, comprising: at least one processor, wherein at least one of the at least one processors implements a multi-domain architecture; at least one Random Access Memory unit; a secure operating system, wherein the secure operating system operates at least two different security classification levels, with data existing in each of the security classification levels; and, at least one data security verification means, wherein the data security verification means performs security checks on the content of data to determine if the data can be transferred by the secure operating system from one classification level to another.
32. The security policy enhancement system of claim 31, further comprising at least one network interface.
33. The security policy enhancement system of claim 31, wherein the at least one network interface connects the security policy enhancement system to at least one network using Transmission Control Protocol and Internet Protocol.
34. The security policy enhancement system of claim 31, further comprising at least two network interfaces, wherein the at least two network interfaces connect the security policy enhancement system to at least two networks.
35. The security policy enhancement system of claim 34, wherein each of the at least two networks operate at different classification levels.
36. The security policy enhancement system of claim 35, wherein the at least two networks utilize Transmission Control Protocol and Internet Protocol.
37. The security policy enhancement system of claim 31, wherein the secure operating system utilizes the multi-domain architecture of the at least one processor to ensure process isolation.
38. The security policy enhancement system of claim 31, wherein the secure operating system provides interfaces allowing applications written for at least one other operating system to be run in the trusted operating system.
39. The security policy enhancement system of claim 31, wherein the security checks performed by the at least one data security verification means are performed in the at least one Random Access Memory unit.
40. A trusted operating system which emulates another operating system by allowing an application program written for the other operating system to execute on the trusted operating system without requiring changes to the application program.
41. The trusted operating system of claim 40, wherein the emulated operating system is an open source operating system.
42. A trusted operating system, capable of concurrently running a plurality of processes, which provides a subtype mechanism wherein the subtype mechanism allows additional access control differentiation beyond mandatory and discretionary access.
43. The trusted operating system of claim 42, wherein the subtype mechanism allows a first process to access a process object, a file system object, or a device object only if the subtype of the object is on a list of subtypes authorized to be accessed by the first process.
44. The trusted operating system of claim 42, wherein the subtype mechanism allows a first process to access data only if the subtype of the data is on a list of subtypes authorized to be accessed by the first process.
45. A trusted operating system wherein four separate policies are enforced whenever any process attempts to access any file system object, the policies comprising: a Mandatory Security Policy; a Mandatory Integrity Policy; a Discretionary Access Control Policy; and a Subtype Policy.
46. A trusted operating system which prevents a first process from learning about the existence or status of a second higher classified process by limiting the number and speed of covert storage channels.
 This application claims priority from Provisional U.S. patent application Ser. No. 60/388,738, filed Jun. 17, 2002, which is hereby incorporated by reference in its entirety.
 The present invention relates to the field of trusted computing systems.
 The XTS-300™ Trusted Computer System, most recently manufactured by Getronics Government Solutions, LLC of Herndon, Va., has long been the only National Security Agency (NSA) evaluated high-assurance general-purpose computer system. Through careful design, the XTS-300 has been evaluated at the Class B3 level by the NSA according to its Trusted Computer System Evaluation Criteria (TCSEC), the teachings of which are incorporated herein by reference in their entirety. The B3 rating is proof that the system provides a very high level of security functionality. FIG. 1 provides a high-level overview of the requirements to achieve various TCSEC security classification levels. The TCSEC is also known more formally as the United States Department of Defense Standard Number 5200.28-STD, and is often colloquially referred to as the "Orange Book".
 Because of the high level of security functionality provided by the XTS-300, it has provided defense, intelligence, diplomatic, law enforcement, and other communities with an extremely secure system running on the latest generation of Intel server-class hardware. In addition, the XTS-300 leverages its commodity hardware architecture to take advantage of frequent hardware advances in the Intel® ×86 hardware base and in the SCSI subsystem.
 The XTS-300 is used as a platform upon which applications are built that filter data and enforce security policies. Filtering is a process which allows rules-based inspection and selection criteria to be applied to a variety of data, thus allowing approved data, where appropriate, to safely pass from one security classified level to another security classified level. Many of these programs have been called "Guards" because they guard one network from another using hardware enforced protections of the XTS-300 while still allowing selected data to flow through carefully architected and fully accredited logic paths between networks of differing levels.
 While the XTS-300 has been successful, the number and nature of the computer software programs which can be run on the XTS-300 is limited by its operating system.
 Accordingly, a preferred embodiment of the present invention is directed to a system and method that substantially obviates one or more of the problems due to limitations and disadvantages of the related art.
 It is an object of the present invention to create a trusted operating system comprising an application domain, in which trusted and untrusted applications can be executed; an operating system services layer, wherein the operating system services layer provides interfaces allowing applications written for at least one other operating system to be run in the trusted operating system, whereby the operating system services layer emulates the at least one other operating systems; a trusted system services layer; and a security kernel, for enforcing system security policy and integrity rules, and for providing basic operating system services, including facilitating user and administrator actions.
 It is another object of the present invention to create a trusted computer system comprising at least one processor, wherein each of the at least one processors supports a multi-domain architecture; at least one terminal, for facilitating operation of the trusted computer system; at least one data storage unit; at least one memory unit; and a secure operating system running on the trusted computing system, wherein the secure operating system utilizes the multi-domain architecture of the at least one processor to enforce process isolation.
 It is yet another object of the present invention to provide a security policy enhancement system, comprising at least one processor, wherein at least one of the at least one processors implements a multi-domain architecture; at least one Random Access Memory unit; a secure operating system, wherein the secure operating system operates at least two different security classification levels, with data existing in each of the security classification levels; and, at least one data security verification means, wherein the data security verification means performs security checks on the content of data to determine if the data can be transferred by the secure operating system from one classification level to another.
 It is still another object of the present invention to provide a trusted operating system which emulates another operating system by allowing an application program written for the other operating system to execute on the trusted operating system without requiring changes to the application program.
 Another object of the present invention is to create a trusted operating system, capable of concurrently running a plurality of processes, which provides a subtype mechanism wherein the subtype mechanism allows additional access control differentiation beyond mandatory and discretionary access.
 Yet another object of the present invention is to implement a trusted operating system wherein four separate policies are enforced whenever any process attempts to access any file system object, the policies comprising a Mandatory Security Policy; a Mandatory Integrity Policy; a Discretionary Access Control Policy; and a Subtype Policy.
 Still another object of the present invention is to create a trusted operating system which prevents a first process from learning about the existence or status of a second higher classified process by limiting the number and speed of covert storage channels.
 Additional features and advantages of the invention are set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.
 The present invention is preferably a general-purpose computing system in that it can be used for a wide range of applications, from multi-user workstation to trusted guard to trusted server. Although a preferred embodiment of the present invention leverages some of the hardware architecture and operating system kernel design techniques used in the XTS-300, the preferred embodiment of the present invention described herein has been rearchitected to add support for contemporary hardware and a robust set of Linux® Application Programming Interfaces (APIs) and Application Binary Interfaces (ABIs) so that the thousands of programs and commands written for Linux, in their binary form and without porting or recompilation, can be copied and run under the protection of the security architecture implemented in a preferred embodiment of the present invention. Thus, a preferred embodiment of the present invention provides an emulated open source environment where ultra-secure functions can be performed in a trusted manner.
 In addition, a preferred embodiment of the present invention allows other, trusted programs to access APIs unique to the present invention, thereby providing access to and, in certain situations, control over some or all security aspects of a preferred embodiment of the present invention. While providing ABI/API compatibility with Linux (i.e. emulating Linux), the present invention is wholly a creation of the inventors and assignee hereto and uses no Linux kernel code. It is therefore a highly secure, Linux-compatible environment enjoying both the freedom to run open source applications and the security associated with a guarded, proprietary system.
 A preferred embodiment of the present invention employs an operating system called the Secure Trusted Operating Program (STOP™). Unlike earlier approaches, a preferred embodiment of the present invention is architected to support Linux ABIs/APIs and security enforcing APIs and commands that are unique. This preferably allows the present invention to provide unparalleled security while also permitting the present invention to run more standard, commercially available applications without the need for substantial modifications.
 A preferred embodiment of the present invention provides multilevel secure Trusted Security Functions (TSFs), which are to the Common Criteria for Information Technology Security Evaluation approximately what Trusted Computing Base (TCB) was to the TCSEC, that allow simultaneous processing and storage of data at different classifications or sensitivities and needs-to-know (categories/compartments) by users with different clearances and needs-to-know. Unlike systems which operate in system-high mode, which is typically defined as a security mode of operation wherein each user, with direct or indirect access to a specific information system, its peripherals, remote terminals, or remote hosts, has all of the following: (a) valid security clearance for all information within the information system; (b) formal access approval and signed nondisclosure agreements for all the information stored and/or processed (including all compartments, subcompartments and/or special access programs); and (c) valid need-to-know for some of the information contained within the information system, a preferred embodiment of the present invention can eliminate arbitrary over-classifying of data.
 A preferred embodiment of the present invention is designed for high robustness and/or high risk environments, which implies not only incorporation of particular security features, but a very high level of assurance. This level of assurance allows a preferred embodiment of the present invention to be accredited to handle data at a wide range of sensitivities (e.g., classification levels) in a wide range of operational environments. The present invention is designed to provide a high level of security while running many kinds of applications, including specialized applications such as network guards or filters for handling the semi- or fully automatic downgrading and/or down flow of information.
 FIG. 1 is a table providing a high-level overview of the requirements to achieve the various TCSEC security classification levels.
 FIG. 2 is a table illustrating the minimum TCSEC rating a system should have to allow users within a given range of authorizations to access data within a given range of classifications.
 FIG. 3 is a block diagram illustrating the four domain architecture employed in a preferred embodiment of the present invention.
 FIG. 4 is a table providing a presently preferred hardware specification for a computer system used as part of a preferred embodiment of the present invention.
 Reference will now be made in detail to preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings.
 The operating system component of a preferred embodiment of the present invention is a multiprogramming operating system that can support terminal connections for multiple users. In a presently preferred embodiment, up to 200 processes can run concurrently, each with up to four gigabytes of virtual memory. The operating system component of the present invention also preferably supports Linux APIs and can run, in a secure environment, most object or binary programs compiled on Linux without requiring modification of such object or binary programs. In addition, the present invention preferably provides an X-Windows graphical user interface (GUI) outside the Trusted Security Functions (TSF), which can be made available at a console for work by untrusted users.
 A preferred embodiment of the present invention also permits network connectivity by building TCP/IP and Ethernet protocols (10BaseT/100BaseT) into the TSF, while also supporting the implementation of network servers (e.g., SMTP, HTTP, and the like) outside of the TSF. In an embodiment of the present invention expected to pass Common Criteria evaluation, attachments within the same network must currently be single-level, while multiple networks can each be at different levels.
 A preferred embodiment of the present invention implements all currently accessible windows on a given display at the same security level. Although a preferred embodiment of the present invention does not support multi-level cut-and-paste due to security concerns and possible processor overhead, it should be appreciated by one skilled in the art that such functionality can be implemented without departing from the spirit or the scope of the present invention. A preferred embodiment of the present invention implements a trusted path mechanism, preferably implemented as a Secure Attention Key (SAK), for execution of commands at other security levels. Such commands are preferably entered through a trusted command interface. Initiation of the trusted path causes suspension of the GUI, and absolutely isolates the trusted command interface from the GUI environment.
 A preferred embodiment of the present invention is based around a combination of a multilevel secure operating system and a customized Intel x86 hardware base. The operating system component of the present invention preferably provides mandatory access control that allows for both a security (MAC) and integrity (MIC) policy. The mandatory security policy enforced by a preferred embodiment of the present invention is reflective of the Bell and LaPadula security model, as described in D. Bell and L. LaPadula; "Secure computer systems: Mathematical Foundation," ESD-TR-73-278, Vol. 1, Mitre Corp, 1973, the teachings of which are incorporated herein by reference in their entirety.
 Beyond the minimal requirements for a TCSEC B3 or Common Criteria system, a preferred embodiment of the present invention provides a mandatory integrity policy (which is required by medium- and high-robustness profiles), an extra subtype policy, and a familiar, Linux-like operating environment. By way of example, without intending to limit the present invention, the integrity model of a preferred embodiment of the present invention can be used for advanced virus protection. The mandatory integrity policy is reflective of the Biba integrity model, as described in Biba, K. J., "Integrity considerations for Secure computer Systems", ESD-TR 76-372, MITRE Co., April 1977, the teachings of which are incorporated herein by reference in their entirety.
 In addition to mandatory access control, a preferred embodiment of the present invention also implements discretionary access control (DAC) and provides user identification and authentication means needed for user ID-based policy enforcement. A preferred embodiment of the present invention provides a policy mechanism, called "subtypes," which can be used in a customer-specific way in conjunction with MAC, MIC, and DAC controls. In this embodiment, each device, process, and file system object has a subtype attribute. Each process has 3 lists of accessible subtypes, one for each the aforementioned device, process and file system object types. In order to access an object of one of those types, a process must have the object's subtype on its own subtype list.
 These four mechanisms ( DAC, MAC, MIC and Subtype) can be used in various application designer chosen combinations to restrict or permit access to various data objects, processes, devices and the like. A particular file, for example, might be restricted by a selection of these access controls to being changeable only by a process of a certain classification but even beyond that, by only a certain group and even by a certain user.
 The TSF exhibits several strong architectural characteristics, including: minimization, layering, abstraction, and data hiding. As used herein, minimization refers to an operating system design technique wherein non-critical non-security functionality is kept apart from the TSF to reduce overall system complexity. This can allow humans to successfully evaluate complex data processing programs and systems. Layering, as used herein, refers to an operating system design technique wherein the TSF employs a modularized design with "layers" used as an organizing principle. This provides clearly defined interfaces, individual layer testing, facilitates a locking hierarchy, and points out the layers of data abstraction, as data which is more abstract would be at higher layers. Abstraction, as used herein, refers to an operating system design technique wherein more complex data structures are built from less complicated ones. Abstraction is used to hide unneeded or undesired details which may be appropriate at one layer of the Operating System from processes or modules which operate within a higher layer. Data hiding, as used herein, refers to an operating system design technique wherein the scope of data is minimized. Data which is hidden is visible to only those modules for which visibility is necessary. Data hiding is used to force the use of abstraction. The TSF makes use of hardware features to provide process separation and TSF isolation and has been designed and implemented to resist penetration. The system design is based on a formal security model and other high-level design documentation.
 Unlike most modem operating systems, the operating system component of the present invention has preferably been architected around security. Thus, every level of the system, including each database, application, user, terminal, and process, has a level of security associated with it. As illustrated in FIG. 3, the operating system portion of a preferred embodiment of the present invention utilizes an architecture referred to as "rings of isolation" (also referred to as "domains"), in which the inner rings cooperate to provide security functionality, and the outer rings depend on the inner rings for proper functioning.
 The multi-domain architecture illustrated in FIG. 3 prevents terminals from simultaneously connecting to processes at different MAC levels. To connect to a process with a different level, a user must first disconnect, or the operating system must disconnect the user, from any processes currently running. The operating system is essentially tamperproof due to this domain architecture and process isolation. In fact, a preferred embodiment of the present invention is so secure that even processes are restricted by domain privileges, and are allowed to send messages only to those other processes that have the same or lesser domain privileges. All of these conventions are enforced within the system itself. By way of example, without intending to limit the present invention, Domain 0 of FIG. 3, which represents the Security Kernel and which operates at the system's highest level of security, is inaccessible by users. Input/Output device drivers reside at this level, thereby preventing unauthorized access to the device drivers.
 In addition to enforcing security using the domain architecture described above, a preferred embodiment of the present invention further separates administrator and operator roles using an integrity policy. The system enforces the "principle of least privilege" (i.e., users should have no more authorization than that required to perform their functions) for administrator and operator roles. All actions performed by privileged (and normal) users can be audited. The audit log is protected from modification using integrity and subtype mechanisms.
 The operating system component of a preferred embodiment of the present invention also provides an alarm mechanism to detect any accumulation of events that indicate an imminent violation of the security policy, such as a series of unsuccessful logins or inaccurate passwords. Individual accountability is provided with an auditing capability. Data scavenging is prevented through object reuse (i.e., residual data) prevention mechanisms.
 The multilevel security features of a preferred embodiment of the present invention's TSF enforce trusted labeling, a mandatory access control policy, and a mandatory integrity control policy that enable the system to allow users with different clearances and needs-to-know to simultaneously store and process information that exists at different classification levels or sensitivities and/or in different need-to-know categories or compartments. Authorized users can process information at its actual sensitivity level, helping to eliminate the arbitrary over-classification of information that often occurs in system-high operations.
 With respect to an embodiment of the present invention deployed or evaluated using the Common Criteria, the present invention is preferably designed to meet EAL5 assurance requirements, with portions of the EAL6 and EAL7 requirements also met. For the most part, these EAL requirements are similar to the Orange Book (i.e., TCSEC) B3 assurance requirements. The security functionality required for B3 is preferably achieved, but the exact set of functional requirements met by a preferred embodiment of the present invention will depend on the protection profiles put forward by customers.
 As illustrated in FIG. 1, a system that is rated as a Class B3 system provides a TCB/TSF that provides the security features required by the TCSEC. The NCSC's Guidance for Applying the DoD TCSEC in Specific Environments (known as "The Yellow Book", the teachings of which are incorporated herein by reference in their entirety) includes a "Security Index Matrix for Open Security Environments". By way of clarification, the terms Open and Closed indicate the strictness of security controls in the system's development environment, not its operational environment. FIG. 2 shows the minimum TCSEC rating a system should have to allow users within a given range of authorizations to access data within a given range of classifications.
 The wider the range of classifications, the higher the rating the system needs to assure it will protect data. Class B1 systems (e.g., compartmented-mode workstations) provide too little assurance for many multilevel processing scenarios in which data ranges from Unclassified to Secret, or from Secret to Top Secret/SCI compartmented.
 The operating system component of the present invention preferably comprises a Trusted Computing Base (TCB) and Trusted Security Functions (TSF), which enforce security policy, and untrusted commands, which generally provide user interfaces familiar to Unix and/or Linux users.
 A preferred embodiment of the present invention leverages the Pentium® or Xeon™ CPU's four-domain chip architecture to reinforce the operating system component's mandatory security and integrity access control policies by physically isolating security domains in hardware, thereby preventing system processes from tampering with each other. The multi-domain CPU architecture restricts access to segments, pages, and instructions. As illustrated in FIG. 3, there are four levels: Domain 0 to Domain 3, with Domain 0 being the most privileged level. The CPU also provides multiple checks for protection violations within memory references.
 As illustrated in FIG. 3, non-TSF processes and TSF processes are mapped into the multi-domain CPU architecture in the same manner. Both types of processes map to the same Domain 0 Kernel, Domain 1 Trusted System Services, and Domain 2 Operating System Services. More information on the processes in each domain follows.
 The most privileged domain, the Security Kernel contains most of the Reference Monitor that enforces system security policy. Small and well structured to enable complete security evaluation, testing, and verification, the Kernel provides basic OS services. Such services include, but are not limited to, resource management, process scheduling, interrupt and trap handling, auditing, and mandatory and discretionary access policy enforcement for processes and device objects. To facilitate such enforcement, I/O device drivers preferably reside in Domain 0. Domain 0 processes cannot be directly called or modified by users.
 TSS provides networking, I/O, file system management, and file system object discretionary access policy enforcement for both trusted and untrusted system processes and applications. The TSS environment is controlled by the Security Kernel, which enforces mandatory security, mandatory integrity, and subtype control on the TSS and all other operations. Domain 1 processes cannot be directly called or modified by users.
 OSS provides APIs expected by applications written for Linux or using Linux tools. OSS also provides proprietary APIs to help manage and use trusted aspects of a preferred embodiment of the present invention. OSS translates the APIs into trusted operating system primitives provided by the Kernel and TSS. OSS also manages some application signals and process groups. Due to the security architecture of a preferred embodiment of the present invention, applications can interface with only the OSS portion of the TSF—they cannot call TSS or the Kernel directly.
 If a process is running at low integrity and has no privileges, it is considered untrusted. These untrusted applications include the user commands and tools that are familiar to Linux/Unix users. Both trusted and untrusted applications execute in Domain 3, and can only execute in Domain 3.
 Trusted Software includes all security-relevant functions that operate as independent services (e.g., a security map editor). Some Trusted Software functions may bypass the TSF's mandatory and/or discretionary controls, e.g., to enable high-integrity users to establish/modify the file system hierarchy to accommodate use of high-integrity nodes. Trusted Software functions are available to system operators and administrators for security-related housekeeping, including, but not limited to user registration/removal, password assignment, system installation/configuration, and privileged tasks not supported by other operating system components. A few Trusted Software functions, such as application session start-up, are available to Domain 3 users.
 Also included as an optional part of a preferred embodiment of the present invention is a Software Development Environment that enables developers to write their own untrusted applications. Typically, "C" is the programming language used for such untrusted applications, although other languages and shells supported by Linux could be used. Untrusted commands and programs are distributed with the operating system for administration of the system.
 A preferred embodiment of the present invention implements trusted databases which contain sensitive user and group access, session control, and print queue information which is protected from unauthorized modification by unprivileged processes. Trusted databases can be manipulated only by user-developed trusted processes, or trusted editors used by system/security administrators.
 To enforce the mandatory access policies that make a preferred embodiment of the present invention multilevel secure, the operating systems component implements a Reference Monitor. The Reference Monitor enforces authorized access relationships between system subjects such as trusted and untrusted processes acting on a user's behalf to perform accesses, or the like, and system objects, such as file system objects, devices, semaphores, sockets, processes, and the like.
 Trusted system subjects are used mainly for functions that manipulate the system's trusted databases or perform strictly controlled circumventions of the TSF's mandatory and/or discretionary access rules. A typical example of a trusted process is a Regrader (reclassifier/relabeller) process in a Trusted Guard. Except for those few processes that must update a trusted database or bypass the operating system component's access controls, untrusted subjects can be relied upon to perform most application functions.
 A Reference Monitor compares each attempt by a subject to reference, or access, an object against a list of reference types (including read, write, and/or execute) the subject is authorized to perform on that object. The Reference Monitor's access validation mechanism is invoked for every reference by a subject to an object, thus preventing any unauthorized accesses. To ensure its integrity, the Reference Monitor's access control/validation mechanism is programmed to be tamperproof. The Reference Monitor is implemented in the TSF, which derives from the Intel CPU's multi-domain isolation mechanisms the absolute separation of the Reference Monitor from Domain 2 and Domain 3 functions and applications running on the system.
 Domain isolation protects code and data in the Kernel from modification by processes in any other Domain and protects the code and data in each Domain from modification by users/processes in any less privileged Domain.
 The system's mandatory integrity mechanism sets integrity levels of TSF program files, databases, and most trusted software processes to operator or higher and excludes untrusted users (subjects) from the TSF by limiting their maximum integrity to less than that of TSF objects.
 Trusted Software processes (like most applications) keep their working data in process-local data areas that cannot be shared by other processes or accessed by untrusted software. The Kernel prevents any process from directly accessing another process' program text and local data and prevents untrusted processes from modifying trusted processes and their data.
 In a preferred embodiment, before a terminal can communicate with the TSF, the operator must press the Secure Attention Key (SAK), which temporarily disconnects the terminal from any untrusted processor processes. This ensures that the user is communicating with the TSF, not with an untrusted process spoofing a TSF process. Any unlocked terminal used by trusted software is protected from untrusted software and other users' processes by a terminal-unique device subtype. When a user enters the TSF via the secure path, the secure server detaches the terminal's subtype from all untrusted processes associated with the session. Terminal access to untrusted processes is restored only after the user explicitly exits the trusted environment.
 Subtypes are used like tokens; to access an object on the system, a subject must possess the object subtype for that object. The system's subtype mechanism is used by the Kernel to restrict access to processes, trusted databases, and devices. As described above, the primary use of subtypes is to provide control over the Trusted Path; when the SAK is pressed, the Server changes the subtype of the terminal to prevent any untrusted process from accessing it. Subtypes are also used by the file system management (FSM) process to assure that FSM gets exclusive access to the file object. When it accesses the file object, FSM resets the subtype to one to which only FSM has access. After it finishes processing the file, FSM resets the file to its original subtype. Finally, subtypes are used to protect the system's trusted databases, by giving only trusted programs the appropriate subtypes needed to access the databases.
 Each object in a preferred embodiment of the present invention is referenced by a unique identifier, and has its own set of access and status information (including subtypes) to implement non-hierarchical mandatory access controls based on need-to-know, and mandatory and discretionary access attributes. An object's mandatory access information includes its mandatory security and integrity levels and categories or compartments; this information provides the basis on which the Kernel makes mandatory access control decisions related to the object.
 Simple Security: Subject may read or execute object only when subject's security level dominates objects.
 Security*Property: Subject may write object only when object's security level dominates subjects. The present invention's Security*Property implementation preferably allows subject to write object only when subject and object are at the same security level. This prevents lower level subjects from writing higher-level objects they cannot later access.
 A preferred embodiment of the present invention supports 16 hierarchical security classifications and 64 independent non-hierarchical "need-to-know" security categories/compartments.
 A preferred embodiment of the present invention enforces K. J. Biba's integrity policy, a corollary to the Bell-LaPadula model, which enforces the system's mandatory integrity rules. Just as the system's mandatory security rules protect information from unauthorized disclosure, the system's mandatory integrity rules protect information from unauthorized modification.
 Simple Integrity: Subject may read or execute object (e.g., data file) only when object's integrity level dominates subjects.
 Integrity *Property: Subject may write object only when subject's integrity level dominates object's. The present invention's Integrity*Property preferably allows a subject to write an object only when the subject and object integrity levels are the same, preventing higher-integrity subjects from writing lower-integrity objects (which could be considered trustworthy by other software) they cannot later access.
 The present invention preferably enforces a discretionary access policy whereby access to an object is assigned by the object's owner according to the identity of subjects associated with the object and/or groups to which those subjects belong. An object's discretionary access information includes up to at least 7 user and group identifiers (including the object's owning user and owning group), and their individual read, write, and execute permissions. Read, write and execute permissions are also provided for "world".
 Access Modes: Subject may access object in only those mode(s) granted by object's owner. Each object is assigned read, write, execute permissions for object's owner, owner's group(s), members of other groups allowed by owner, and all others ("world" permissions).
 Processes, devices, and file system objects are controlled by subtype in addition to the mandatory and discretionary controls. Subtypes are non-hierarchical. They can employed by trusted applications to separate applications (e.g., such as stages in a guard), even if those applications run with the same owner and at the same mandatory level.
 Systems that enforce a mandatory security policy may still allow unintended signaling channels, or illicit information flows, that are counter to the mandatory security policy. Such signaling channels and illicit flows are commonly known as covert channels. By way of example, without intending to limit the present invention, a classic covert channel is created using the file system, such as by having a malicious process at a low security level attempt to create a file. In such an example, if the file creation attempt is successful, that is deemed equivalent to a "1", and where the file creation attempt fails, that is deemed equivalent to a "0". A high security process can control whether the file creation attempt is successful by filling up the file system or portion thereof. Thus, a string of bits can be effectively communicated from the high security process to the low security process by repeating this sequence over and over, with the high security process removing a file when it wants the low security process's creation attempt to succeed. Such a communications means can be highly effective, and can be used to circumvent mandatory security policies or the like.
 Covert channels are generally difficult to use, and low assurance systems are not required to document or reduce them. However, a preferred embodiment of the present invention is designed to be high assurance and to offer protection in highly hostile environments, therefore the present invention preferably incorporates mechanisms to reduce the number and capacity (i.e., speed) of covert channels, and potential covert channels are documented. Mechanisms employed in a preferred embodiment of the present invention which help to protect against covert channel use include, but are not limited to, introducing timing delays and obscuring status values in situations which might be used as a covert channel.
 A preferred embodiment of the present invention preferably leverages the significant processing power and internal architecture of the Intel "Prestonia" Xeon™ 2+ GHz CPUs to improve performance. FIG. 4 provides more detail on a preferred standard hardware configuration of the present invention, including hardware peripherals which the operating system component of a preferred embodiment of the present invention will support.
 A preferred embodiment of the present invention can be embodied in tower case or rack mounted configurations, or in high density, TEMPEST, and Zone embodiments. Careful configuration control and testing are applied to assure delivery of a consistent, reliable, and secure product.
 Trusted applications on a previous embodiment of the present invention have significantly aided in the maturation of multilevel security (MLS) to the point where MLS systems are being deployed widely in operational configurations at low risk and with significant payoff. Numerous certification and accreditation efforts have been completed of now-operational Trusted Applications—several developed by applicants—that use the previous embodiment as their high-assurance platform. Many of these applications are Trusted Guards designed to allow the strictly controlled sharing of information among networks operating at different sensitivity levels (e.g., Classifications) and/or "needs-to-know" (categories or compartments).
 A preferred embodiment of the present invention can also be designed to be backward compatible with these older trusted applications. However, two "enabling technologies" for building Trusted Guard applications for present invention, the DataSync Guard and the Standard Automated Guard Environment (SAGE), have also been developed.
 With the operating system component of a preferred embodiment of the present invention, the development of Trusted Applications is much easier. Applications can be created entirely on "real" Linux systems, created entirely on an embodiment of the present invention implemented as a development system, or created partially on both. In any of these development environments, an entirely new and richer set of rapidly evolving development tools are available to the programmer and designer.
 The customizable DataSync Guard™ represents a new generation of Trusted Guard application, the first-ever TCP/IP socket-based High Assurance Guard. The DataSync Guard strictly enforces the security policies governing the connection-oriented transfer of data between systems that reside on separate system-high networks at different classification (or sensitivity) levels. The DataSync Guard achieves near-real-time data transfers. Originally conceived to enable the reliable synchronization of databases operating at different sensitivity levels, the DataSync Guard is communications protocol independent, and can handle ASCII, HTML, XML, well-formed binary and other data flowing between any two systems that can transfer their data over socket connections to the Guard.
 By replacing "store and forward" file transfer protocols with TCP/IP sockets as its data transfer mechanism, and performing most of its processing in RAM which eliminates the need to write to or read from disk or resynchronize the file system each time data are passed from one Guard subroutine to another, the DataSync Guard reduces the latency delay of transactions during data throughput.
 In a presently preferred embodiment, the DataSync Guard can support complex filter profiles to mediate data transfers among databases on up to four different single-level system-high networks. The DataSync Guard can filter ASCII and/or well-formed binary data, checking both the correct formatting of the header of the database transaction, and performing security checks on the content of each data element. The DataSync Guard can implement multiple "if-then-else" actions and sophisticated dirty word/clean word searches.
 The Standard Automated Guard Environment (SAGE™) is a set of design concepts, interface definitions, executable code, and accreditation documentation. SAGE is a development environment for building connectionless (store-and-forward) Trusted Guards, alternatively referred to as trusted gateways.
 SAGE minimizes the coding required to implement Trusted Guards by providing the common elements (processes, libraries, etc.) that most Guards require. SAGE eases certification and accreditation of these Guards by minimizing the Guard's TSSF. SAGE provides a well-structured framework within which programmers can build Trusted Guard applications more quickly and easily than developing those applications "from scratch". The general objective of a SAGE Guard is to securely, automatically, and efficiently allow a restricted flow of data between two systems or networks with different security characteristics. While the security policy can be customized by the Guard developer, SAGE has been designed to accurately enforce that policy and to protect data from unauthorized disclosure or modification while the data resides on a preferred embodiment of the present invention.
 SAGE has been developed in standard ANSI C and documented using trusted software principles to ease the burden of accreditation. Several SAGE guards have already been accredited, including guards for the United States Department of Defense, the United States State Department, and the United States Air Force.


text:
Today we actually had periods of sun. In fact, for much of today I was able to wear my sunglasses. After breakfast, dad snoozed in the library while I read. At 11 am, we joined the long queues of people trying to leave the ship when they opened the gangway. My plan was to go to Creek Street to see the salmon swimming upstream. First, though, we needed to find the town's free shuttle bus.
15 minutes later, we joined the hordes of ship's passengers unwilling to walk and headed off for the center of town. I chatted with a family on their way back to the Norwegian Pearl, moored one berth over. Having heard such negative stories about Norwegian Cruise Lines, I asked how they liked their ship. The father said that the food and the service were very disappointing. His 8-year old daughter piped up, "but I like the food." I asked her if she was eating the pizza and she looked at me as if I could read her mind. The grandmother added that the she thought the food on Carnival and Disney was much better. I thought the food on Carnival was at best so-so, which didn't say much for NCL.
We got off near Creek Street and made our way to it. This part of Ketchikan basically has been restored/built to resemble the town of a 100 years ago. The two-story wooden houses are perched over the stream, through which salmon are making their way home to spawn. When we reached Dolly Arthur's House (which is also a historic dolly house, now a museum), dad recognized that he had been on Creek St. with mom on an earlier visit. He also recognized the funicular, though to my disappointment, they seemed to be repairing something and it was temporarily disabled.
Looking into the stream we were able to spot several large salmon making their way upstream (along with a few dead ones). I have to say the salmon didn't look like they were trying all that hard. Mostly they were hanging out in the eddies and coves, hoping that the high tide would carry them all the way upstream. Every now and then one or two would swim against the current, and then regroup back in a little cove. I have to say that salmon don't look like imagined them. These were dark grey or blackish with whitish tails. No pink or red to be seen. They were about a yard long, too (or at least they looked that size from our distance).
Because I had a 1:05 pm excursion, that didn't leave us much time. We headed back to the ship for lunch. At first, dad wanted to take the shuttle bus back, but I wasn't sure where to catch it so we walked. It only took about 20 minutes to reach the ship, and dad said that the probably needed the exercise and it might do him good, but at the same time, it was more than he had walked in much of the trip.
After lunch on the Lido, I headed back outside and met my excursion. I was heading to some place called the Misty Fjords National Monument. We sailed for about 30 minutes south from Ketchikan. We learned that in 8th grade, high school students are dropped in pairs on deserted islands where they have three days to show they've mastered all the survival skills they've learned.
The Fjords were formed during the last ice ages, when large glaciers scooped out incredibly deep valleys. The main channel through which we were moving is over 1800 feet deep (below the water). Above the water, the visible mountains were thickly covered in green forest of pine and spruce. Although the sky was somewhat cloudy by now, I could still see patches of blue sky and I could imagine that here was a green world untouched by global warming and pollution. I could spot a few dead trees among the green and asked the naturalist if they had problems with parasites. No, she said; they were doing their best to keep out some pest spreading across Canada. The reason for the dead trees was that their roots were really shallow. The glaciers removed all the topsoil, and only a few feet had reformed in the last 10-12,000 years. The trees' roots spread widely, but could only go down a few feet, which made them vulnerable to intense weather.
As we reached the entrance to the national monument we passed New Eddystone Rock. Named after a lighthouse in Britain that Captain Vancouver thought it resembled, it's actually the plug of a dormant volcano, whose cone above sea level has eroded and mostly disappeared, leaving only a sand spit inhabited by harbor seals and some trees where bald eagles nest.
As we turned into the Misty Fjords monument, the sea level rose to only a 1000 feet deep, but the walls of the valley were themselves 1000-2000 feet high, with glacier-polished stone, marked only by the occasional spruce tree. The shore (above the high-water mark) was heavily forested. Overhead there were gulls and terns. I asked the naturalist which were which. "The gulls are the boring looking ones; the terns are interesting."
By now, the skies had mostly clouded over, and we were having bouts of light drizzle intermixed with some sunlight, so the fjords were living up to their name. The best way I can describe them is to imagine Yosemite Valley, half flooded by seawater. While it did have a few waterfalls, these were much smaller than Yosemite's but one was quite beautiful.
The end of our sea journey was a small wooden dock. Here we boarded our float planes that were landing, dropping off the passengers who would sail back on our boat. One guide book this morning said that so many float planes land in Misty Fjords, it can resemble Omaha Beach on D-Day, but that was a bit of an exaggeration. We had been given different colored cards at the beginning, and this determined which plane we flew back in. I had a blue card, so I flew back in a 1952 de Havilland propeller plane. Since I was the first, the pilot asked if I would like to sit up front, so I said sure.
This was a mixed blessing. On the one hand, I had the best view on the plane: 180 degrees. On the other hand, it was hard to photograph most of it, because although the propeller rotated too fast to be seen as more than a blur, it did show up when I took a picture. We buckled up and put on protective headphones to mask the (literally) deafening roar of the motor. In now time at all we had taken off and were flying over first the fjords and then the forested interior. While the sea journey had taken nearly three hours, we flew back in less to Ketchikan in only thirty minutes. I expected to more scared than I turned out to be, even with the water landing (which is a bit rougher than landing on a tarmac).
I met dad for dinner and we headed back to the Pinnacle Grill for the last time this voyage. We both started with the jumbo shrimp cocktail, but afterwards our choices completely diverged. Dad had the Caesar salad and the west coast cioppino, while I ordered the lobster bisque and the 12 oz lobster tail (steamed). For dessert, dad had the fresh berries with sabayon, while I had the lemon brulee tart with blueberry whipped cream. I asked first what it was and the maître d' explained it was like a key lime pie, except with lemon and had a brulee crust that you would find on a crème brulee. It was quite good.
Now we are listening to the classical performance and tomorrow we have a sea day while cruising the Inner Passage to Vancouver. The forecast is for partially sunny, so I might even swim in the afternoon.


Freedom for the visually & auditory impaired.
The gift of hearing and vision are senses we commonly take for granted. Approximately 50,000 Americans have been classified as deaf-blind. Unfortunately many of the deaf-blind experience the world as an unpredictable, and possibly threatening place.
With WanderWise, we use the sense of touch as a tool to make more of the world accessible to the deaf-blind. By combining a camera with vibration motors, proximity sensors, and GPS, we enable turn-by-turn navigation to those visually and auditory impaired.
The second app in the suite is an iOS app that allows for family members or a caregiver to enter destinations that the user can walk to. This simple, but effective solution makes tasks like going to the convenience store, seeing friends, and other outdoor day-to-day activities possible for those without vision and hearing.


text:
Q: Show that given path is rectifiable I was solving some problems from Conway's complex analysis and stuck on following problem
let $\gamma(t) = \text{exp}(\dfrac{-1+i}{t})  0 < t \le 1$ and $\gamma(0) = 0$, I need to show that is path is rectifiable and also sketch the trace of $\gamma$
Now,
$\gamma'(t) = \dfrac{1-i}{t^2} \text{exp}(\dfrac{-1+i}{t})$,  $0 < t \le 1$
also $\gamma'(0)  = \displaystyle\lim_{h \to 0} \dfrac{\text{exp}(\dfrac{-1+i}{h})}{h}$, which diverges to $\infty$ ,
The length is given by  :
$\displaystyle \int_0^{1} \left|\gamma'(t)\right|dt$
using this formula, I get
$\displaystyle \lim_{t \to 0+} \int_{t}^{1} \dfrac{\sqrt{2}}{t^2} \text{exp(-1/t)}$
I don't see how to show this integral is finite.

A: Hint: It is possible to show that the inequality
$$
\frac{\sqrt{2}}{t^2}e^{-\frac{1}{t}} \leq 2t
$$
holds for $0 < t \leq 1$. Then it follows that your integral is finite.


text:
SFF06: Outlander, Preacher, Blake Neely (The Flash)
For the June edition of Sci Fi Fidelity, Mike and Dave are changing the format to make the podcast more topical. The main discussion centers around the pros and cons of showrunners participating in fandoms on social media, and the guys line up on opposite sides of the argument. With recent fervor over fandom being broken, opinions are shared as to the veracity of that assertion.The new approach for show discussions has the hosts each selecting a show that they're currently enjoying and highlighting the current story in the most recent episodes. This month, Outlander and Preacher tae center stage and get glowing recommendations. The hosts also talk about the shows they're reviewing here on Den of Geek and what's on the horizon for future viewing.The featured interview this month is with Blake Neely, composer of the soundtracks for Arrow, The Flash, Supergirl, and Legends of Tomorrow among other things in his TV and film music resume. See acast.com/privacy for privacy and opt-out information.


text:
Q: How to use variables with loop in :lt jquery? I'm trying to parse an xml, and then take put the values as per the xml into 4 divs sequentially. In these divs, first value to be changed is the  second is inside the anchor  and third is also inside the anchor
TITLE
.
I was successful in changing the values via :first for the first of the appearing divs... Then I tried looking for how to change content for remaining 3 divs.. My current code is based on only 3 divs only for the demo purpose...
My code is as follows:
HTML

Dynamically_loaded

Dynamically_loaded

Dynamically_loaded

JAVASCRIPT

The XML:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<items xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <item>
        <p_id>1a</p_id>
        <product_title>Vitamin A</product_title>
        <product_category>Chemical</product_category>
        <product_code>ABCD</product_code>
        <product_img>img_10_vitamin_a.png</product_img>
        <product_url>10_vitamin_a.html</product_url>
    </item>
    <item>
        <p_id>1b</p_id>
        <product_title>Vitamin B</product_title>
        <product_category>Plants</product_category>
        <product_code>ASDF, 8820, 3423</product_code>
        <product_img>img_10_vitamin_b.png</product_img>
        <product_url>10_vitamin_b.html</product_url>
    </item>
    <item>
        <p_id>2a</p_id>
        <product_title>Vitamin C</product_title>
        <product_category>Chemical</product_category>
        <product_code>4503, 1111</product_code>
        <product_img>img_10_vitamin_c.png</product_img>
        <product_url>10_vitamin_c.html</product_url>
    </item>
    </items>

Condensed XML for easy of use is as follows:
var xml="<items><item><p_id>1a</p_id><product_title>Vitamin A</product_title><product_category>Chemical</product_category><product_code>ABCD</product_code><product_img>img_10_vitamin_a.png</product_img><product_url>10_vitamin_a.html</product_url></item><item><p_id>1b</p_id><product_title>Vitamin B</product_title><product_category>Plants</product_category><product_code>ASDF, 8820, 3423</product_code><product_img>img_10_vitamin_b.png</product_img><product_url>10_vitamin_b.html</product_url></item><item><p_id>2a</p_id><product_title>Vitamin C</product_title><product_category>Chemical</product_category><product_code>4503, 1111</product_code><product_img>img_10_vitamin_c.png</product_img><product_url>10_vitamin_c.html</product_url></item></items>";

I need to take the value from the data-prd_id attribute, and in the jquery, I need to search for that value in the xml. If found, I need to change the attributes and values of the respective div with the values taken from the xml. Currently, the product_category & product_code are not required, but I just needed to understand it too for knowledge purposes...
Thanks for any help.
Regards,
-


text:
Ocean Fish Head Curry: One Part Money, One Part Goods (一分钱,一分货)
First Post: May 09, 2014
Update: Feb 02, 2016
Fish Head Curry (Ang Sai) $40
What is the price of a BMW?
The answer is obvious right? You can't really tell until you know the make, model and the year of registration. Everyone knows that.
But when it comes to food, it seems that people throw simple logic out of the window.
How much is this Curry Fish Head?
Ooohhhh….. so expensive ah! I usually pay only $20 for Curry Fish Head!
If you don't believe me, just post the above photo of Curry Fish Head on your facebook page and let your friends know that it's $40 and see what kind of reaction you get! You are bound to find some who insist that they can buy Curry Fish Head for half the price.
Har Lok Prawns $3 per piece
The value of a fish head is dependent on three factors viz size, species and grade. The easiest to access is its size. The really large fish heads can weigh 1.8kg and fill a big claypot. The market price for whole heads of this size (cooked) is $40 to $45. Half heads will go for around $24. Ang Goli (Gold band snapper) is usually the benchmark for fish heads. The less common Ang Sai (红狮 – Crimson Snapper) costs around $3/kg more and is preferred over Ang Goli when it is available. Nowadays, a lot of Cze Char are using farmed Ang Goi (红鸡 – Red Snapper) which are smaller and more readily available. These are generally going for between $15 to $20 for half a head.
The grade of the fish will also determine its price but this is perhaps not as easy to assess for the casual consumer. The grade depends on where the fish originated from and how it has been handled. Generally, locally caught fish from day boats will be a higher grade than those which are from Indonesia or Vietnam as it would not be as fresh as the locally caught fish.
With that background, you can now understand why I feel that the $40 curry fish head at Ocean is a fair price. They use only large Ang Goli here and the boss tells me that he only buys Grade A fish, so the quality is very good.
Chilli Cockles
Aside from the quality of the fish, there are two other factors which make Ocean Curry Fish Head special. Firstly, the curry gravy has a unique flavour which I haven't come across anywhere else. It is like a cross between the rich coconutty Nonya version and the spicy Indian version. The owner, Mr Tay tells me that the recipe had evolved from a traditional Nonya recipe that he had learnt from a friend with the addition of Indian style marsala spices to become what it is today. Secondly, unlike a lot of Chinese Fish Head curry stalls who would steam the fish head first before a quick braise in the curry, the fish head here is cooked in the curry itself. This makes the curry tastier as it has been infused with all the natural sweetness of the fish. 4.5/5
Butter Prawns $1.50 per piece
Ocean Fish Head Curry is an unusual kind of stall. It's more like an Economic Rice stall where all the dishes are ready prepared but with a Cze Char component that you can order dishes prepared ala minute. I have heard people commenting that the food is good BUT it is one of the most expensive Economic Rice places around. Like most Singaporeans, my holy grail is to find food that is "Good and Cheap". But the fact of the matter is that very often, we find that "Cheap is no Good" and "Good is no Cheap"! If you want good quality ingredients, it comes with a price. So rather than "Good and Cheap", the holy grail should really be "Good and Reasonable". So it really boils down to the Price/Quality ratio which one considers "Reasonable" and of course, whether the consumer is reasonable or unreasonable!
Gui Fei贵妃Chicken $4.50 per piece
Aside from the Curry Fish Head, the other signature dishes are the chilli cockles and soy sauce sotong. I did not try the sotong, but the chilli cockles were very good and highly recommended by the kakis. They also have other ready cooked dishes like Har Lok Prawns ($3 ea), Butter Prawns ($1.50 ea) and Gui Fei 贵妃 Chicken which is essentially poached chicken that is dressed with a dried chilli, soy based sauce and named after one four beauties of the Tang dynasty. The dried chillies give the Chicken a bit of smokey zing which is a nice departure from the usual chicken rice chicken which we are most familiar with. 4.25/5 All of the dishes we sampled were of a better quality than your run-of-the-mill economic rice.
Mr Tay – founder
Ocean Fish Head Curry has been around since the 80's. Mr Tay, the founder, used to be in the car air-conditioning business in the days when vehicle air conditioning was an after market accessory. When the Japanese started making cars with air conditioning installed, he suddenly found that he had to change trades. That was when he decided to open a stall to sell the one thing that he loves to eat. The first stall was at the coffeeshop at Geylang Lor 35 where Sin Huat is currently. Then they moved to Toa Payoh Lor 8 and opened another branch at Telok Ayer Street. They finally settled in Toa Payoh Lor 4 three years ago.
Incidentally, if you are wondering why Mr Tay named his stall "Ocean", it turns out that his first career was that of a merchant shipman and so he has always loved the open seas. That might also explain the quality of the seafood that he insists on procuring for his stall.
If you are a Fish Head fanatic, you would have already known about this stall. It is one of the most popular Fish Head Curry stalls amongst our facebook fans and the reason is obvious. The fish head is fresh and the curry is unique and tasty! If you don't have enough kakis to form a Fish Head quorum, then you can still order the same curry with fish meat as well as their other dishes as "economic rice". It might be a little more expensive than your run of the mill economic rice stall, but you know what they say, "一分钱,一分货" (lit one part money, one part goods ie you get what you pay for).
Economic Rice
Fish Head Curry
Ocean Curry Fish Head
Blk 92, Toa Payoh Lor 4 #01-264
Branch: No. 181 Telok Ayer Street Singapore 068629 63249226
Loo's Hainanese Curry Rice: Legendary Hawker Legacy
Chia Keng Hokkien Mee: The Next Generation
Kim Keat Hokkien Mee: Turning over a new Opeh Leaf!
New Mahamoodiya: Kampung Prata Style!


Full Circle, The Olympic Heritage in Coins and Medals, a new exhibition organized by the American Numismatic Society will open to the public on October 20, 2003. The exhibition contains over 180 objects, which tell the history of the Olympic Games from its beginnings in the 8 th century BC to the present day.
Thanks to some extraordinary loans from a handful of ANS Members, visitors to the exhibition will be able to see a full range of remarkable Olympic material. On display are a number of artifacts from the ancient Games, including coins, vases, and athletic equipment. From the modern games, visitors will be able to see a set of winner's and participation medals, including the rare 1896 winner's medal. Also shown is a host of other material relating to the modern Games, such as posters, pins, and the first Olympic torch (from the 1936 Games). All these artifacts provide a unique and timely overview of the Olympic movement, both ancient and modern, as the Summer Games return to Greece in 2004.
The ancient Greeks celebrated the Games as part of a religious festival for Zeus in the sanctuary of Olympia. Initially the competition was only a single foot-race, but soon the long jump, wrestling, chariot racing and other sports were included. For nearly 1000 from their introduction in 776 BC, the Games played an important role in the sports-fixated culture of the Greco-Roman world. However, during the early Christian period the games faded from view along with other proscribed pagan ceremonies. In 1896, through the singular efforts of Baron Pierre de Coubertin, the spirit of the Olympics was revived and the first modern Games took place in Athens, Greece. Although the 1896 Games were a ceremonial success, it would take several decades before the Olympics would garner world-wide attention. Shortly before he died on the eve of the Second World War, Baron de Coubertin was able to see his idea achieve the grand proportions he had dreamed of. For better or worse, the 1936 Berlin Games were the most elaborate, most expensive, and most ostentatious yet. In fact, they were the first truly modern Olympics, complete with a television broadcast.
Exhibition hours are 10:00am to 4:00pm Monday through Friday at the Federal Reserve Bank of New York, 33 Liberty Street (wheelchair access provided from the Maiden Lane entrance). Admission is free. For a guided tour of the Federal Reserve Exhibits, you must make an appointment by calling 212-720-6130. For further information call the ANS at 212-234-3130.


text:
Vick Named Doyle Scholarship Recipient
Freshman Alexander Vick was awarded the first annual "Thomas L. Doyle" scholarship to St. Michael Catholic High School.
The partial tuition award scholarship is paid by the University of Notre Dame in honor of Dr. Doyle for his long-time service to the University. From 2001-2015, Doyle served as the Academic Director for the "Alliance for Catholic Education," a program that trains teachers who have recently graduated from college and places them in under-resourced schools around the country. Doyle currently teaches Honors Algebra II at St. Michael Catholic High.
Vick was chosen for the scholarship on the basis of his outstanding academic record, his friendly and kind disposition, and his willingness to serve the school in a variety of capacities.
Congratulations, Alexander!