Operating systems have had security for more than 30 years. Networks have had security for about 10 years. Today the two worlds meet only in network login. How can the operating system secure network applications? This requires embracing network notions of secure channels, identity, and group membership. It also requires extending systematic access control to many interfaces that are currently unprotected.

This session will describe the tradeoffs of porting substantial UNIX programs to Windows NT shallowly (keeping them as UNIX-like as possible) vs. deeply (taking advantage of Windows NT functionality as much as possible). Presentation will focus around case studies of real ported applications: the top-end transaction processing monitor and the Oracle database, with an additional case study to be announced.