Lecture 13: April 26, 2021

Reading: text, §5.3, 6.1–6.2, 6.4
Due: Lab 2, due May 5, 2021; Homework 3, due May 7, 2021

1. Tranquility
   1. Declassification problem
   2. Strong tranquility
   3. Weak tranquility

2. Requirements of integrity models

3. Biba Model (strict integrity policy)

4. Clark-Wilson Model
   1. Theme: military model does not provide enough controls for commercial fraud, etc. because it does not cover the right aspects of integrity
   2. Components
      1. Constrained Data Items (CDI) to which the model applies
      2. Unconstrained Data Items (UDIs) to which no integrity checks are applied
      3. Integrity Verification Procedures (IVP) that verify conformance to the integrity spec when IVP is run
      4. Transaction Procedures (TP) takes system from one well-formed state to another

Matt Bishop Office: 2209 Watershed Sciences Phone: +1 (530) 752-8060 Email: mabishop@ucdavis.edu

ECS 135, Computer Security Version of April 28, 2021 at 3:38PM

You can also obtain a PDF version of this.