April 29, 2026 Outline

Reading: text, §19, 20–20.1.2
Assignments: Homework #3 due May 11; Project progress report, due May 11

1. Assurance
   1. Trustworthy entities
   2. Security assurance
   3. Trusted system
   4. Why assurance is needed
   5. Requirements
   6. Types of assurance
   7. Assurance and software life cycle
   8. Assurance and software development methodologies

2. Threats and Vulnerabilities

3. Architectural Considerations
   1. Layering
   2. Build in or add on?
   3. Reference monitors, security kernels, TCBs

Matt Bishop Office: 2209 Watershed Sciences Phone: +1 (530) 752-8060 Email: mabishop@ucdavis.edu

ECS 235B, Foundations of Computer and Information Security Version of April 30, 2026 at 5:52PM

You can also obtain a PDF version of this.