March 1, 2019 Outline

Reading: text, §17.6.2, 14, 18.1–18.2
Due: Homework 4, due March 8, 2019

1. Examples
   1. Firewalls
2. Principles of secure design
   1. Principle of least privilege
   2. Principle of fail-safe defaults
   3. Principle of economy of mechanism
   4. Principle of complete mediation
   5. Principle of open design
   6. Principle of separation of privilege
   7. Principle of least common mechanism
   8. Principle of least astonishment
3. Confinement problem
   1. What it is
   2. Covert channels
   3. Rule of transitive confinement
   4. Difficulty of preventing leaking
4. Isolation: virtual machines
   1. What it is

Matt Bishop Office: 2209 Watershed Science Phone: +1 (530) 752-8060 Email: mabishop@ucdavis.edu

You can also obtain a PDF version of this. Version of March 1, 2019 at 4:00PM