Exam 2: Software Engineering and Security

____ takes a close look at each software module and involves picking the appropriate programming languages, data structures, and algorithms.

What are the MLS general access rules?

A "____" is a special type of "smart" virus that can replicate from system to system without human user intervention.

____ is defined as the illegal copying and/or distributing of copyrighted software without the permission of the copyright holder.

In AOP, a(n) ____ is a rule indicating a logical description of a set of join points.

The ____ model provides an implementation guide that helps project managers to decide if a particular activity needs to be adopted.

Compare dynamic versus static analysis.

TCSEC defined _____ as the combination of the computer hardware, the software security kernel, and its privileged components.

What are the three essential TCB elements required to ensure that an MLS system operates correctly?

A "____" is a type of stand-alone software attack that does not replicate by itself.

____ is a new programming paradigm that promotes separation of concerns.

AOP introduces a new construct, called a(n) ____, that seeks to encapsulate crosscutting concerns.

With ____, the software is stored in such a way that a code is "hidden" before execution and an independently stored key is retrieved and constructed prior to execution using a method known only by the vendor.

In terms of software engineering, _____ is defined as the effort to create software in a secure computing platform.

The value of a DEUD is the same for every software product deployed.

A ____ attaches itself to a program or data file so that it can spread from one computer to another, infecting as it travels.

The interrelationships among security levels in the Bell-LaPadula security model form a directed graph called a(n) _____.

A ____ case is a specific way of using the system by performing some part of the functionality.

The term ____ describes products that are commercially available and can be purchased and integrated with little or no customization.

Security technologies such as firewalls, anti-virus software, and intrusion-detection engines have been developed to "catch" security holes in software systems.