Outline for January 22, 2016

Reading: text, §4, [1]
Due: Presentation paper selection, Jan. 22; Project selection, Jan. 22; Homework 1, due January 25

1. Policy
   1. Sets of authorized, unauthorized states
   2. Secure systems in terms of states
   3. Mechanism vs. policy
2. Types of Policies
   1. Military/government vs. confidentiality
   2. Commercial vs. integrity
3. Types of Access Control
   1. Mandatory access control
   2. Discretionary access control
   3. Originator-controlled access control
4. High-level policy languages
   1. Characterization
   2. Example: Ponder
5. Low-level policy languages
   1. Characterization
   2. Example: tripwire configuration file