March 7, 2022 Outline

Reading: text, §18.3, 14
Assignments: Homework 4, due March 9

Module 59

1. Capacity
   1. When is bandwidth of covert channel?
   2. Analysis
   3. Measuring capacity

Module 60

2. Mitigating covert channels
   1. Preallocation and hold until process terminates
   2. Impose uniformity
   3. Randomize resource allocation
   4. Efficiency/performance vs. security

Module 61

3. Principles of secure design
   1. Principle of least privilege
   2. Principle of fail-safe defaults
   3. Principle of economy of mechanism
   4. Principle of complete mediation
   5. Principle of open design
   6. Principle of separation of privilege
   7. Principle of least common mechanism
   8. Principle of least astonishment

Matt Bishop Office: 2209 Watershed Sciences Phone: +1 (530) 752-8060 Email: mabishop@ucdavis.edu

ECS 235B, Foundations of Computer and Information Security Version of March 6, 2022 at 6:27PM

You can also obtain a PDF version of this.