Chapter 8 Flashcards
What type of exception handling technique tries handle errors in an application?
Try…Catch
What term describes where a system is allowed to continue operations after a component fails.
Fail-Soft
What term describes that when a system fails, it will revert to a state that protects the health and safety of people.
Fail-Safe
What term describes prioritizing the physical security of assets over anything else ?
Fail-Secure
What describes allowing a process to read from and write only to certain memory locations?
Confinement/Sandboxing
What is responsible for ensuring a system behaves properly and is the combination of hardware, software, and components that work together to enforce security policies.
TCB
What is a channel that allows communication between the TCB and system without exposing the TCB to Security exploitations.
Trusted Paths
What allows a subject from being able to break out of isolation to affect the TCB and allows a subject to perform command line ops without risk to the TCB.
Trusted Shell
What describes a system that is always secure no matter what state it’s in ?
State Machine Model
What is a table of subjects and objects that indicates the actions that each subject can perform on each object.
ACM
What Bell-LaPadula property states that a subject may not read information at a higher security level ?
Simple Security Property
What Bell-LaPadula property states that a subject may not write information to an object at a lower level ?
Star Security Property
What Bell-LaPadula property states that the system uses an access matrix to enforce discretionary access controls?
Discretionary Security Property
What model is based on the information flow model and focuses on integrity.
Biba Model
What Biba model property states that a subject cannot read an object at a lower security level ?
Simple Security Property
What Biba model property states that a subject cannot modify an object at a higher security level ?
Star Security Model
What model focuses on integrity and uses a three part relationship of subject/programs/objects?
Clark-Wilson Model
What model applies to a single integrated database, and creates security domains that are sensitive to the notion of conflict of interest ?
Brewer and Nash Model
What model permits access controls to change dynamically based on the user’s previous activity ?
Brewer and Nash Model
What model is where subjects are allowed to only perform predetermined actions against predetermined objects?
Goguen–Meseguer Model
What model is based on automation theory and domain separation ?
Goguen–Meseguer Model
What model is based on the idea of defining a set of system states, initial states, and state transitions?
Sutherland Model
What model is focused on the secure creation and deletion of both subjects and objects?
Graham-Denning Model
What model is an extension of the Graham-Denning model?
HRU Model
