Aar}  0 PP @p00Pp HH $ @d HHHH̀̀̀ff@  d Footnote TableFootnote**.\t.\t/ - :;,.!? - a;5; dZTOCHeading1Heading2   ZEquationVariablesF#?@>@@A A#A@??? <$lastpagenum><$monthname> <$daynum>, <$year>"<$monthnum>/<$daynum>/<$shortyear>J<$hour>:<$minute00> <$ampm> on <$dayname>, <$monthname> <$daynum>, <$year>"<$monthnum>/<$daynum>/<$shortyear><$monthname> <$daynum>, <$year>"<$monthnum>/<$daynum>/<$shortyear> <$fullfilename> <$filename> <$paratext[Title]> <$paratext[Heading1]> <$curpagenum> <$marker1> <$marker2> (Continued)+ (Sheet <$tblsheetnum> of <$tblsheetcount>)Heading & Page <$paratext> on page<$pagenum>Pagepage<$pagenum>See Heading & Page%See <$paratext> on page<$pagenum>. Table All7Table<$paranumonly>, <$paratext>, on page<$pagenum>Table Number & Page'Table<$paranumonly> on page<$pagenum> Handout DateJanuary 7, 1999Heading <$paratext> Number Only<$paranumonly>AHHTMLHeadingsA;;==??AI5y??? 5 5*Eրh.Ba.?*???"?$?& ?( ?* ?, ?. ?0 ?2 ?4 ?6 ?8 ?: ?< ?> ?@ ?B ?D ?F ?H ?J ?L ?N ?P ?R ?T ?V EJ3.>+E(2.?X ?Z ?\ ?^ ?` ?b ?d ?e ?f ?h ?j ?l ?n ?p ?r ?t ?v ?x ?z ?{ ?| ?~ ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? @ @ @ @ @ @  @  @ @ @ @ @ @ @ @ @ @  @" @$ ABADAFAH AJ AL AN AP AR AT@& @( @* @, @. @0 @2 @4 @6 @8 @: @< @> @@ @B @D @F @H @J @L @N @P @R @T @V @X @Z @\ @^ @` @b @d @f @h @j @l @n @p @r @t @v @x @z @| EKa.@~ @ @ @@ELb.>1.EMc.@@ @ @ @ AV AX AZ@ @ @ @ @ A\ A^ A` @ @ @ @ @ @ @ @ @ @@@@ @ @ @ @ @ @ @ @ @ @ @ @ @ @ Ab Ad Ae@ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @@@@ @ @ @ A A A A A  A AAAA A A A A A A  A" A%A'A)A+ A- A/ A1 A3 A5 A6EN4.EOa.EPb.EQc.EU5.EVa.EWb.EXc.EYd.EZe.E[f.E\g.Eـ i.E)a.E*b.E+c.E,d.E-e.E.f.E/g.E0h.F j.dqFd? HmR? HmRHRHRFootnote Hr@? Hr@HzHz Single LineH? Footnote ?   HD?  HDHH Double LineH? Double Line? ? H?  Single Line? HZ?  TableFootnote EGxR?EGxREPwEPw TableFootnoted5p HHˆ5xHHˆGe HHˆ5zHHˆld?d?dHl d?d1lmpvy|  #'+/ADW3Bm       }d ?!d WeHTML Mapping Table }Hd ?Hd We }Hd ?Hd We HUV 5HUV Ge HUV 5HUV l H$ 5H$ Ge H$ 5H$ l HHˆ5HHˆ!++( `Outline for April 20, 2000 S`Greetings and felicitations! `0Office hours this week after today: W4-5, Th2-3 )D`Chinese Wall Policy AP`DArises as legal defense to insider trading on London stock exchange !B iLow-level entities are objects; all objects concerning the same corporation form a CD (company dataset); @_CDs whose corporations are in competition are grouped into COIs (Conflict of Interest classes) !C kIntuitive goal: keep one subject from reading different CDs in the same COI, or reading one CD and writing @to another in same COI !D gSimple Security Property: Read access granted if the object (a) is in the same CD as an object already @iaccessed by the subject, or (b) is in a CD in an entirely different COI. Assumes correct initialization !E mTheorems: (1) Once a subject has accessed an object, only other objects in that CD are available within that @CCOI; (2) subject has access to at most 1 dataset in each COI class F`"Exceptions: sanitized information !G l* Property: Write access is permitted only if (a) read access is permitted by the simple security property; @fand (b) no object in a different CD in that COI can be read, unless it contains sanitized information !H jComparison to BLP: (1) ability to track history; (2) in CW, subjects choose which objects they can access @_but not in BLP; (3) CW requires both mandatory and discretionary parts, BLP is mandatory only. '`ORCON L`!Originator controls distribution R`DAC, MAC inadequate T`Solution is combination 4,`!Role-based Access Control (RBAC) 58`Definition of role 6`Partitioning as job function 7`Discuss Data General model 8^`Secure vs. Precise 9j`Confidentiality only :`uAssume: output of a function encodes all available information about inputs (such as resource usage,  etc .) ; Protection mechanism: given function  p , its a function  m  such that either  m  =  p  for a given set of inputs, or @!m  produces an error message <`nConfidentiality policy: function which checks that the particular inputs are in the authorized set of inputs != :Security: m  is secure iff there is an  m  such that, for all inputs,  m  =  m ( c (...)),  i.e. ,  m s values consistent with @stated confidentiality policy > RPrecision:  m 1 ,  m 2  distinct protection mechanisms.  m 1  as precise as  m 2  if, for all inputs,  m 1  =  p  implies  m 2  = @p .  m 1  is more precise if there is an input such that  m 1  =  p  and  m 2   p  on that input. ?`mUnion:  m 1      m 2  =  m 3 , where  m 3  =  p  iff  m 1  =  p  and  m 2  =  p ; otherwise,  m 3  =  m 1 . ! ?ICBS: Let  m 1 ,  m 2  besecure protection mechanisms for a program  p  and policy  c . Then  m 1      m 2  is also a @:secure protection mechanism for  p  and  c . Further,  m 1      m 2  is more precise than either  m 1  or  m 2 . !@ Generalizing: for any program  p  and security policy  c , there exists a precise, secure mechanism  m * such @~that, for all secure mechanisms m associated with  p  and  c ,  m * is more precise than  m . aI hBUT: there is no effective procedure that determines a maximally precise, secure mechanism for a policy @ and program. HHˆ5HHˆl}Hd ?!Hd W e }Hd ?#Hd W e }H?%"H% FrameMaker PE Source Item }H ?'!$H We HTML Item }H ?)H We }H?+"%H WeInclude Auto# } H?-$' H We Comments }H?/H We }HH?1%(HH WeElement }H?3'+H We New Topic? }H?5H We } H?7 H We }H ?9(,H We P:Date Line }HH ?;+-HH WeP }H ?=,.H WeN }H ??-/H WeN } H ?A.0 H We }EH ?C/1EH We P:Reading }HEH ?E02HEH WeP }EH ?G13EH WeN }EH ?I24EH W eN } EH ?K35 EH W!e }QH ?M46QH W"eP:Title }HQH ?O57HQH W#eH* }QH ?Q68QH W$eN }QH ?S79QH W%eN } QH ?U8: QH W&e }]H ?W9;]H W*eP:Body }H]H ?Y:<H]H W+eP }]H ?[;=]H W,eN }]H ?]<>]H W-eN } ]H ?_=? ]H W.e }iH(?a>@iH( W/e P:Numbered1 }HiH(?c?AHiH((0eLI 1e Parent = OL Q2e Depth = 0 }iH(?g@BiH( W3eN }iH(?iACiH( W4eY } iH(?kBD iH( W5e }H ?mCEH  W6e P:Heading1 }HH ?oDFHH  W7eH* }H ?qEGH  W8eN }H ?sFHH  W9eN } H ?uGI H  W:e }H(?wHJH(  W;e P:Numbered }HH(?yIKHH(( <eP =e Parent = OL Q>e Depth = 0 }H(?}JLH(  W?eN }H(?KMH(  W@eY } H(?LN H(  WAe }H ?MOH  WBe P:CellBody }HH ?NPHH  WCeP }H ?OQH  WDeN }H ?PRH  WEeN } H ?QS H  WFe }H ?RTH  WGeP:CellHeading }HH ?SUHH  WHeP }H ?TVH  WIeN }H ?UWH  WJeN } H ?VX H  WKe }H ?WYH  WLe P:Footnote }HH ?XZHH  WMeP }H ?Y[H  WNeN }H ?Z\H  WOeN } H ?[] H  WPe }H(?\^H( WQe P:Bulleted }HH(?]_HH((ReLI Se Parent = UL QTe Depth = 0 }H(?^`H( WUeN }H(?_aH( WVeN } H(?`b H( WWe }H ?acH WXe P:Heading2 }HH ?bdHH WYeH* }H ?ceH WZeN }H ?dfH W[eN } H ?eg H W\e }H?fhH]% P:HeadingRuPEnIn }HH?giHH W^eP }H?hjH W_eN }H?ikH W`eN } H?jl H Wae }7H ?km7H Wbe P:Indented }H7H ?lnH7H WceP }7H ?mo7H WdeN }7H ?np7H WeeN } 7H ?oq 7H Wfe }CH?prCHg% P:TableFootPEnote }HCH?qsHCH WheP }CH?rtCH WieN }CH?suCH WjeN } CH?tv CH Wke }]H(?uw]H( Wle P:TableTitle }H]H(?vxH]H((meLI ne Parent = OL Qoe Depth = 0 }]H(?wy]H( WpeN }]H(?xz]H( WqeN } ]H(?y{ ]H( Wre }H ?z|H Wse P:BodySpaced }HH ?{}HH WteP }H ?|~H WueN }H ?}H WveN } H ?~ H Wwe }H ?H WxeP:Date }HH ?HH WyeP }H ?H WzeN }H ?H W{eN } H ? H W|e }H(?H(}% P:NumberedPESpaced }HH(?HH((~eP e Parent = OL Qe Depth = 0 }H(?H( WeN }H(? H( WeY } H(? H( We }H @ H WeP:DateProject }HH @ HH WeP }H @ H WeN dA=dA> dl dA? douWBm  }d AA d !WeHeadings Table }Hd AC Hd !We }Hd AE Hd !We }HAG H"%Paragraph ForPEmat }HHAI HH "WeHeading Level }HAK H "We Comments }HAM H#W eTitle }HHAO HH #We }HAQ OH #We }H @ H WeN } H @  H We }H @ H W e C:BoldItalic }HH @ HH W eSTRONG }H @H W eN }H @H W eN } H @ H W e }H@!H% C:EquationPE Variables }HH@ "HH WeEM }H@!#H WeN }H@"$H WeN } H@#% H We }H @$&H We C:Italic }HH @!%'HH WeEM }H @#&(H WeN }H @%')H W eN } H @'(* H W!e }H @))+H W"eC:Bold }HH @+*,HH W#eSTRONG }H @-+-H W$eN }H @/,.H W%eN } H @1-/ H W&e }H@3.0H'% X:Heading & PEPage }HH@5/1HH W(e See Also }H@702H W)eN }H@913H W*eN } H@;24 H W+e })H @=35)H W,eX:Page }H)H @?46H)H W-e See Also })H @A57)H W.eN })H @C68)H W/eN } )H @E79 )H W0e }5H@G8:5H1% X:See HeadPE ing & Page }H5H@I9;H5H W2e See Also }5H@K:<5H W3eN }5H@M;=5H W4eN } 5H@O<> 5H W5e }OH @Q=?OH W6e X:Table All }HOH @S>@HOH W7e See Also }OH @U?AOH W8eN }OH @W@BOH W9eN } OH @YAC OH W:e }[H@[BD[H ;% X:Table NumPE ber & Page }H[H@]CEH[H  W<e See Also }[H@_DF[H  W=eN }[H@aEG[H  W>eN } [H@cFH [H  W?e }uH@eGJuH $W@e X:Heading h}HuH@gHKHuH$A% USE XREF PEFMT }uH@iJLuH $WBeN }uH@kKMuH $WCeN } uH@mLN uH $WDe }H@oMRH %WEe P:Header }KH AS PKH 0We Heading1 }HKH AU OQHKH 0WZe }KH AW PWKH 0W[e }HH@qNSHH%F%THROW PEAWAY }H@sRTH %WGeN }H@uSUH %WHeN } H@wTV H %WIe }©H @yUZ©H &WJe }WH AY QXWH 2W\e Heading2 }HWH A[ WYHWH 2Wbe }WH A] XsWH 2Wce }H©H @{V[H©H &WKe }©H @}Z\©H &WMe }©H @[]©H &WNe } ©H @\^ ©H &WOe }»d @]a»d 'WPeHTML Options Table }D»d @D»d 'WQe }D»d @D»d 'WUe }D @^bD (WVe }DH @acDH (WWe }H @bdH (WXe }D @ceD )WYe Image Format }DH @dfDH )W]eIMAGGIF }H @egH )W^e }D @fhD *W_eBanners }DH @giDH *W`eN }H @hjH *Wae }D@ikD+e% Banner ReferPE ence Frame }DH@jlDH +Wfe }H@kH +Wge }D(@GnD((I,h% Copy Files  Imported by PE Rerefernce }DH(@GmoDH( I,Wie }H(@GnpH( I,Wje }DD @GoqDD I-Wke }DDH @GprDDH I-Wle }DH @GqvDH I-Wme }cH A_ YtcH 8Wde }HcH Aa suHcH 8We }cH Ac tcH 8We }Vd @GryVd I.WneSystem Macros }?Vd @G?Vd I.Woe }?Vd @G?Vd I.Wpe }f? @Gvzf? I/Wqe Macro Name }?fH @Gy{?fH I/Wre Replace With }fH @Gz|fH I/Wse Comments }r? @G{}r? I1Wte StartOfDoc }?rH @G|~?rH I1Wue }rH @G}rH I1Wve }~? @G~~? I3Wwe EndOfDoc }?~H @G?~H I3Wxe }~H @G~H I3Wye }?@G?I4z% StartOfSubPEDoc }?H@G?H I4W{e }H@GH I4W|e }?@G?I5}% EndOfSubPEDoc }?H@G?H I5W~e }H@GH I5We }?@G ?I6% StartOfFirstPESubDoc }?H@G ?H I6We }H@G H I6We }?@G ?I7% EndOfFirstPESubDoc }?H@G ?H I7We }H@G H I7We }?@G ?I9 % StartOfLastPESubDoc }?H@G?H I9W e }H@GH I9W e } ?@G ?I: % EndOfLastPESubDoc }? H@G? H I:W e } H@G H I:We }&? @G&? I;We }?&H @G?&H I;We }&H @G&H I;We }8d @G8d I<WeCross-Reference Macros }?8d @G?8d I<We }?8d @G?8d I<We }H? @GH? I=We Macro Name }?HH @G?HH I=We Replace With }HH @GHH I=We Comments }T?@GT? I>We See Also }?THAG?THI>% See Also: PE <$paratext> }THAG TH I>We }n? AG!n? I?We }?nH AG "?nH I?We }nH AG!#nH I?We }d A G"'d I@WeGeneral Macros }?d A G?d I@We }?d AG?d I@W e }?d AG?d I@W!e }? AG#(? IAW"e Macro Name }?H AG')?H IAW#e Replace With }H AG(*H IAW$eHead }H AG)+H IAW%e Comments }? AG*,? IBW&e }?H AG+-?H IBW'e }H AG,.H IBW(e }H A!G-/H IBW)e }d A$G.Ad ICW*eCharacter Macros }?d A&G?d ICW+e }?d A(G?d ICW,e d>;?H$ >:=H$ << l H$ >:H$ ;W l6April 20, 2000ECS 253 Spring 2000Page  1  HUV >:;?HUV >> l HUV >:HUV =W lALast modified at  11:57 am on Thursday, April 20, 2000  HHˆ>:=HHˆ@@ l HHˆ>:HHˆ?W ` }? A*G/B? IDW-e Macro Name }?H A,GAC?H IDW.e Replace With }H A.GBDH IDW/e Comments }? A0GCE? IEW0e }?H A2GDF?H IEW1e }H A4GEH IEW2e dA8HHdA9GdII l dA:GdmFHmpvy|  #'+/ADdLeftd:Rightd ReferenceddHTMLd HeadingsdGHTMLf@U [. Numbered < =0>.Letter. @@ [Body. f@ 2 @.@.@. Date Line Single Line. @@ [Footer. f@U [. Numbered < =0>.Letter. @@ [Mapping Table Title. @@ 2  Footer. @@ [Mapping Table Cell. @@2 Mapping Table Cell. f@T [! TableTitleT:Table : . f@ [ CellHeading. f@ [CellBody. f@ [ CellFooting. f@ 2 ...Signup.\t. f@e [. Letter < >. Numbered-. @@ 2 Mapping Table Cell. @@ [ Mapping Table Cell. f@ [Body.  @@ [Header Double Line.  f@P[ TitleBody. f@e [. Letter < >. Numbered-. f@ [Body. f@ [ BodySpaced. f@ [ Bulleted\t. f@ [...Date. mf@ [l. DateProject. @@ [Header Double Line. f@T [Heading1Body. f@E [ Numbered1.\tNumbered. f@ [.Reading.  f@P[TitleBody. f@$[.Line Single Line. f@ [CellBody. f@ [ CellHeading. f@ [ Footnote. f@T [Heading2Body. f@T [ HeadingRunInBody. f@ [ Indented. f@ [ TableFootnote. f@T [ TableTitleT:Table : . [ [ [ [ [ [  Subscript W Symbol 22 2  [ 2  W Symbol [2 2 [[Emphasis[EquationVariables 2  BoldItalic [Italic [Bold[ [ZZThinMediumDoubleThick@ Very Thin HHHHHFormat AH Mapping Table HHHHHFormat BH Mapping Tableh*|&HHHHHf'-DHH.;?HH&ih( ?@ABCh  D E F G H h( I J K L M h  N O P Q R h  S T U V W h  X Y Z [ \ h( ]^_`ah bcdefhghijk7h lmnopChqrstu]h(vwxyzh {|}~h h( h    h h !"#$h %&'()h *+,-.h/0123)h 456785h9:;<=Oh  >?@AB[h$C D E F G  "!!!!#""""0###uh %H$J$K$L$M$h$&N%R%S%T%U%©h %V&Z&[&\&]&» (^'_'`' ')a(b(c( (*d)e)f) )+g*h*i**,j+k+l+(+-Im,n,o,D ,Ip-q-r-V /Iv.w.x.f .1Iy/z/{/K #2O0P0Q0r /3I|1}1~1W 08W2X2Y2~ 14I33335I44446I55557I6 6 669I 7 7 7c 2s8t8u87:I999 9;I:::& :I;;;8 =I<<<H <>I===T=?I>>>n >I ?!?"? AI#@$@%@&@ @BI'A(A)A*A AI+B,B-B.B DI/C0C1C CEIADBDCD DIDEEEFEComment >?d BlackT!WhiteddARedddGreendd BluedCyandMagentad YellowHeader/Footer $1Header/Footer $1Header/Footer $2Header/Footer $2IndexIndexCommentCommentSubjectSubjectAuthorAuthorGlossaryGlossaryEquationEquation Hypertext Hypertext  Cross-Ref Cross-Ref Conditional TextConditional TextPositionFMPrivatePositionFMPrivateRangeEndFMPrivateRangeEndFMPrivate HTML Macro HTML Macro M.Times.P Times-Roman FrameRoman M.Helvetica.P Helvetica FrameRoman M.Helvetica.BHelvetica-Bold FrameRoman M.Times.B Times-Bold FrameRoman M.Times.I Times-Italic FrameRoman M.Symbol.PSymbol FrameRomanM.Helvetica.BIHelvetica-BoldOblique FrameRomanl1 HelveticaVSymbolZTimes#Regular$Roman MediumBoldRegular ObliqueItalic8G