Chapter8- Written Lab

8.1- Chapter8 Written Lab

• 8.1- Chapter8 Written Lab
• Chapter 8: Principles of Security Models, Design, and Capabilities
• 1. Name at least seven security models.
• Answer: Security models include
• 1.1- state machine,
• 1.2- information flow,
• 1.3- noninterference,
• 1.4- Take-Grant,
• 1.5- access control matrix,
• 1.6- Bell-LaPadula,
• 1.7- Biba,
• 1.8- Clark-Wilson,
• 1.9- Brewer and Nash (aka Chinese Wall),
• 1.10- Goguen-Meseguer,
• 1.11- Sutherland,
• 1.12- and Graham-Denning.
• 2. Describe the primary components of TCB.
• Answer:
• The primary components of the trusted computing base (TCB) are the hardware and software elements used to enforce the security policy (these elements are called the TCB), the security perimeter distinguishing and separating TCB components from non-TCB components, and the reference monitor that serves as an access control device across the security perimeter.
• 3. What are the two primary rules or principles of the Bell-LaPadula security model? Also, what are the two rules of Biba?
• Answer: The two primary rules of Bell-LaPadula are the simple rule of no read-up and the star rule of no write-down.
• The two rules of Biba are the simple rule of no read-down and the star rule of no write-up.
• 4. What is the difference between open and closed systems and open and closed source?
• Answer: An open system is one with published APIs that allow third parties to develop products to interact with it. A closed system is one that is proprietary with no third-party product support. Open source is a coding stance that allows others to view the source code of a program. Closed source is an opposing coding stance that keeps source code confidential.