Fundamental Design Decision

Page 1

First Fundamental Design Decision

In a given application, should the protection mechanisms in a computer system focus on

data

operations

users

Second Fundamental Design Decision

In which layer of the computer system should a security mechanism be placed

Layers are:

application

services

operating system

kernel

hardware

Man-Machine Scale

User interaction (Man oriented) is high on the outer layer whereas machine interaction high on the inner layers (Machine oriented). More security expected on the outer layer than the inner core.

Third Fundamental Design Decision

Do you prefer simplicity - higher assurance - to a feature rich security environment ?

Fourth Fundamental Design Decision

Centralized or Decentralized controls

Should the tasks of defining and enforcing security be given to a central entity or should they be left on individual components in a system ?

Fourth Fundamental Design Decision

How can you prevent a hacker from getting access to layer below the protection mechanism ?

Recovery Tools - recover logical memory

Unix Devices - read access to files

Object Reuse (Release of memory)

Buffer Overruns

Backups

Core Dumps

New Page