Security Arch Flashcards
1
Q
Common Criteria
A
ISO 15408
2
Q
CC - intermediate combination of security
requirement components
A
package
3
Q
ITSEC and TCSEC mapping
A
F1+E1C1 F2+E2C2 F3+E3B1 F4+E4B2 F5+E5B3 F5+E6A1
4
Q
trusted recovery, reference monitor, security admin role clearly defined, design should not be too complex
A
B3
5
Q
Structured - Covert timing channels and SOD, trusted facility management (TFM)
A
B2
6
Q
operational assurance requirements specified in the Orange Book
A
System Architecture System integrity Covert channel analysis Trusted facility management Trusted recovery
7
Q
life cycle assurance requirements specified in the Orange Book
A
Security testing
Design specification and testing
Configuration Management
Trusted Distribution
8
Q
Clark Wilson - integrity rules
A
Integrity-monitoring
rules are called certification rules, and integrity-preserving rules are called
enforcement rules.
9
Q
Custodian
A
Preserves the information’s CIA
