February 13, 2019 Outline

Reading: text, §7, 8; paper [WB04]
Due: Project Progress Report, due February 15, 2019; Homework 3, due February 22, 2019

1. Countermeasures
   1. Blocking near endpoint systems
   2. Blocking at endpoint systems
2. Amplification attacks
3. Chinese Wall Policy
   1. Low-level entities are objects; all objects concerning the same corporation form a CD (company dataset); CDs whose corporations are in competition are grouped into COIs (Conflict of Interest classes)
   2. Intuitive goal: keep one subject from reading different CDs in the same COI, or reading one CD and writing to another in same COI
   3. Simple Security Property: Read access granted if the object:
      1. is in the same CD as an object already accessed by the subject; or
      2. is in a CD in an entirely different COI.
   4. Theorems:
      1. Once a subject has accessed an object, only other objects in that CD are available within that COI;
      2. Subject has access to at most 1 dataset in each COI class
   5. Exceptions: sanitized information
   6. *-Property: Write access is permitted only if:
      1. Read access is permitted by the simple security property; and
      2. No object in a different CD in that COI can be read, unless it contains sanitized information
   7. Key result: information can only flow within a CD or from sanitized information
   8. Aggressive Chinese Wall model
   9. Comparison to BLP
   10. Comparison to Clark-Wilson
4. Clinical Information System Security model
   1. Intended for medical records; goals are confidentiality, authentication of annotators, and integrity
   2. Patients, personal health information, clinician
   3. Assumptions and origin of principles
   4. Access principles
   5. Creation principle

Matt Bishop Office: 2209 Watershed Science Phone: +1 (530) 752-8060 Email: mabishop@ucdavis.edu

You can also obtain a PDF version of this. Version of February 13, 2019 at 1:19PM