Security Principles (3)

Question 1

Ten Commandments of Security

Answer 1

1. Economy of Mechanisms (EM)
2. Fail-Safe Defaults
3. Complete Mediation
4. Open Design
5. Separation of Privilege
6. Least Privilege
7. Least Common Mechanism
8. Psychological Acceptability
9. Work Factor
10. Compromise Recording

Question 2

1. Economy of Mechanisms (EM)

Answer 2

This principle stresses simplicity in the DESIGN and IMPLEMENTATION of security measures

Question 3

2. Fail-Safe Defaults

Answer 3

This principle states that the default configuration of a system should have a conservative protection scheme.

Question 4

3. Complete Mediation

Answer 4

The idea behind this principle is that every access to a resource must be checked for compliance with a protection scheme.

Question 5

4. Open Design

Answer 5

According to this principle, the security architecture and design of a system should be made publicly available; versus security by obscurity, which tries to achieve security by keeping cryptographic algorithms secret and which has been historically used without success by several organizations

Question 6

5. Separation of Privilege

Answer 6

This principle dictates that multiple conditions should be required to achieve access to restricted resources or have a program perform some action

Question 7

6. Least Privilege

Answer 7

Each program and user of a computer system should operate with the bare minimum privileges necessary to function properly. (need-to-know)

Question 8

7. Least Common Mechanism

Answer 8

In systems with multiple users, mechanisms allowing resources to be shared by more than one user should be minimized.

Question 9

8. Psychological Acceptability

Answer 9

This principle states that user interfaces should be well designed and intuitive, and all security-related settings should adhere to what an ordinary user might expect

Question 10

9. Work Factor

Answer 10

According to this principle, the cost of circumventing a security mechanism should be compared with the resources of an attacker when designing a security scheme

Question 11

10. Compromise Recording

Answer 11

This principle states that sometimes it is more desirable to record the details of an intrusion than to adopt more sophisticated measures to prevent it.