security requirement Flashcards
why do modern systems have security?
internet
often control money
too much data
4 main security issues
confidentiality, integrity, authentication/authorization and non repudiation and available
What is soft security?
permissions
what is hard hard security?
encryption
name some approaches to integrity
CRC checking(easy to forge check value)
hash value (simialr problem to CRC)
hash value + secret value(key distribution problem)
best approach is hach value encrytped using asymmetric cipher.
what is the bell-lapadula model
all items given a security clearance. Subject cannot read a document above their clearance level. A document cant be copied or included with another document with a lower security clearance.
what is cucumber
software tool used to help write requirements which are linked directly to tests.
what language does cucumber use?
gherkin