February 21, 2023 Outline

Reading: text, §20.1–20.2
Assignments: Homework #3, due February 23

1. Assurance
   1. Assurance and software life cycle

2. Policy and requirements
   1. Security specifications
   2. Problems with precision
   3. Example: System X and Bell-LaPadula
   4. Justifying requirements

3. Design documents
   1. Security functions summary specification
   2. External functional specification
   3. Internal design description

4. Justifying design meets requirements

Matt Bishop Office: 2209 Watershed Sciences Phone: +1 (530) 752-8060 Email: mabishop@ucdavis.edu

ECS 235B, Foundations of Computer and Information Security Version of February 22, 2023 at 10:51PM

You can also obtain a PDF version of this.