NASA Scientific and Technical Aerospace Reports

developmental effort. This paper illuminates the Department of Defense (DOD) acquisition process as it applies to MCS and
shows how the interests of DOD officials became arrayed against Army intentions to develop and field the MCS system.
Allison’s ‘bureaucratic politics’ model will guide the analysis and illustrate some reasons for the fielding delay. The Maneuver
Control System is a software application designed to automate the command and control information process for the force
level commander and his staff both in a tactical environment and in garrison. The software is designed to run units on Army
standard computer hardware, itself in a parallel development effort. MCS is envisioned to gather, correlate and focus battlefield
information from the five functional areas indigenous to Army operations. These functional areas are; Maneuver, Fire Support,
Air Defense, Intelligence, and Combat Service Support or logistics. Tactical communications links provide the connectivity
between MCS computers allowing them to function in a network. be refined into a precise document describing the system
requirements. This requirements document, after gaining departmental approval, must then be expanded into a technical
specification, which, after solicitation, can be translated into a development contract. Once prototypes are produced, a detailed
series of tests are conducted to determine if the capabilities delivered meet the system requirements.
DTIC
Command and Control; Communication Networks; Computer Programs
20060002074 National Inst. of Information and Communications Technology, Tokyo, Japan
A Development of Experimental Environments ‘SIOS’ and ‘VM Nebula’ for Reproducing Internet Security Incidents
Miwa, Shinsuke; Ohno, Hirotuki; Journal of the National Institute of Information and Communications Technology. Special
Issue on Information Security, Volume 52, Nos. 1/2; March/June 2005, pp. 23-34; In English; See also 20060002073;
Copyright; Avail.: Other Sources
Security incidents are growing significantly on a daily basis in the internet world causing considerable damage. To protect
against these incidents, some protection mechanisms or softwares have come to be used. Each time a new attacking method
or virus or worm appears, it must be analyzed in detail since such protection mechanism or software requires detailed
information on that. However, these incidents are sophisticated because is scale is enlarged and supervened incidents cause
many interactions, which make it difficult to acquire such in-depth information. To analyze sophisticated incidents, we
developed experimental environments for reproducing internet security incidents. In this paper, we report on the development
of our reproducing environments called ‘SIOS’ and ‘VM Nebula’
Author
Internets; Computer Security; Protection; Damage; Computer Viruses
20060002077 National Inst. of Information and Communications Technology, Japan
Design and Phase-1 Development of Secure Overlay Networks
Kadobayashi, Youki; Nakao, Koji; Takizawa, Osamu; Journal of the National Institute of Information and Communications
Technology. Special Issue on Information Security, Volume 52, No. 1/2; March/June 2005, pp. 13-21; In English; See also
20060002073; Copyright; Avail.: Other Sources
Recently, overlay networks are gaining attention as a means to eliminate single point of failure in the application layer.
This paper focuses on secure routing in overlay networks. A threat model is presented, along with our countermeasure
proposal. Our proposal consists of blind forwarding, distributed trust anchor, and probabilistic testing. Unlike previous
contributions on this topic, our proposal is based on trust anchor. Furthermore, we attempt to reconstruct the threat model,
based on the insights gained from previous contributions. We also briefly describe our phase-1 development efforts of a
software framework that implements essential functions of secure overlay. Our software framework attempts to address
application-specific threat models.
Author
Design Analysis; Computer Networks; Countermeasures; Applications Programs (Computers)
20060002090 Mitsubishi Research Inst., Inc., Tokyo, Japan
Buffer-Overflow Detection in C Program by Static Detection
Nakamura, Goichi; Murase, Ichiro; Makino, Kyoko; Journal of the National Institute of Information and Communications
Technology. Special Issue on Information Security, Volume 52, Nos. 1/2; March/June 2005, pp. 35-41; In English; See also
20060002073; Copyright; Avail.: Other Sources
Buffer-overflow is the most dangerous vulnerability implicit in C programs. whether a Buffer-oveflow emerges or not in
the program runtime, is depend upon inputs of the C program. We developed algorithms and tools to detect buffer-overflows,
not accidentally partial detection by monitoring program runtime situation, but exhaustively detection by static-analysis of C
138