Outline for February 6, 2006

Reading: text, §4.4–4.5, 5.1–5.2.2

1. Greetings and felicitations!
   1. Puzzle of the day
2. Types of Access Control
   1. Mandatory access control
   2. Discretionary access control
   3. Originator-controlled access control
3. High-Level Policy Languages
   1. Characterization
   2. Example: DTEL
4. Low-Level Policy Languages
   1. Characterization
   2. Example: Tripwire configuration file
5. Goals of Confidentiality Policies
6. Bell-LaPadula Model with Levels Only
   1. Security Levels
   2. Simple Security Property
   3. *-Property
   4. Basic Security Theorem
7. Bell-LaPadula Model
   1. Compartments
   2. BLP as lattice structure
   3. Simple Security Property
   4. *-Property
   5. Basic Security Theorem