February 11, 2022 Outline

Reading: text, §8.28.4; paper traduce.pdf
Due: Progress Report, due February 11; Homework 3, due February 18

Module 34

1. Clinical Information System Security model
   1. Intended for medical records; goals are confidentiality, authentication of annotators, and integrity
   2. Patients, personal health information, clinician
   3. Assumptions and origin of principles
   4. Access principles
   5. Creation principle

Module 35

2. ORCON
   1. Originator controls distribution
   2. DAC, MAC inadequate
   3. Solution is combination
   4. Examples of DRM (including how not to do it!)

Module 36

3. Role-based Access Control (RBAC)
   1. Definition of role
   2. Partitioning as job function
   3. Axioms
   4. Containment and other uses
   5. RBAC₀, RBAC₁, RBAC₂, RBAC₃

Module 37

4. Traducement
   1. Problem of recordation
   2. Requirements of solution

Matt Bishop Office: 2209 Watershed Sciences Phone: +1 (530) 752-8060 Email: mabishop@ucdavis.edu

ECS 235B, Foundations of Computer and Information Security Version of February 13, 2022 at 11:43PM

You can also obtain a PDF version of this.