Lecture 7: October 9, 2019

Reading: text, §4.5–4.6, G, 5.1–5.2.1, A
Due: Homework 1, due October 9, 2019; Lab 1, due October 18, 2019


  1. Greetings and felicitations!
  2. Puzzle of the Day
  3. High-level policy languages
    1. Characterization
    2. Example: Ponder
  4. Low-level policy languages
    1. Characterization
    2. Example: tripwire configuration file
  5. Example policies
    1. UC Davis Allowable Use Policy
      1. Rights and responsibilities
      2. Privacy
      3. Enforcement
      4. Unacceptable conduct
    2. University Electronic Communications policy
      1. General provisions
      2. Allowable use
      3. Privacy and confidentiality
      4. Security
      5. Retention and disposition
    3. User advisories
    4. UC Davis implementation
  6. Goals of confidentiality policies
  7. Bell-LaPadula Model with levels only
    1. Security levels
    2. Simple security property

UC Davis sigil
Matt Bishop
Office: 2209 Watershed Sciences
Phone: +1 (530) 752-8060
Email: mabishop@ucdavis.edu
ECS 153, Computer Security
Version of October 9, 2019 at 10:28PM

You can also obtain a PDF version of this.

Valid HTML 4.01 Transitional Built with BBEdit Built on a Macintosh