Lecture 10 Outline
Reading: text, §4; [War70]
Due: Homework 3, on May 9
- Greetings and felicitations!
- Midterm is Tuesday, May 2, in class
- Homework 3 is available and is due in 2 weeks, on May 9.
- Sets of authorized, unauthorized states
- Secure systems in terms of states
- Mechanism vs. policy
- Types of Policies
- Military/government vs. confidentiality
- Commercial vs. integrity
- Types of Access Control
- Mandatory access control
- Discretionary access control
- Originator-controlled access control
- Attribute-based access control
- High-level policy languages
- Example: Ponder
- Low-level policy languages
- Example: tripwire configuration file
- Policies in natural language
Discussion question. Bureaucracies have their own version of the English language with which you must become familiar. To help you do so, here are some common phrases. See if you can translate them.
- Scintillate, scintillate, asteroid minikin.
- Members of an avian species of identical plumage congregate.
- Surveillance should precede saltation.
- Pulchritude possesses solely cutaneous profundity.
- It is fruitless to become lachrymose over precipitately departed lacteal fluid.
- Freedom from incrustations of grime is contiguous to rectitude.
- The writing implement is more potent than the claymore.
- It is fruitless to attempt to indoctrinate a superannuated canine with innovative maneuvers.
- Eschew the implement of correction and vitiate the scion.
- The temperature of the aqueous content of an unremittingly galled saucepan does not reach 212° Farenheit.