Exam 13: Trusted Computing and Multilevel Security

A _______ is a collection of requirements that share a common focus or intent.

The ________ access mode allows the subject only write access to the object.

Security classes are referred to as __________.

________ is when a new document consolidates information from a range of sources and levels so that some of that information is now classified at a higher level than it was originally.

In the United States the ______ and the NSA jointly operate the Common Criteria Evaluation and Validation Scheme.

_________ is assurance that a system deserves to be trusted such that the trust can be guaranteed in some convincing way such as through formal analysis or code review.

The BLP model includes a set of rules based on abstract operations that change the state of the system.

The __________ service is responsible for booting the entire operating system in stages and assuring that each portion of the OS,as it is loaded,is a version that is approved for use.

_________ secure is a class of system that has system resources at more than one security level and that permits concurrent access by users who differ in security clearance and need-to-know,but is able to prevent each user from accessing resources for which the user lacks authorization.

"No read up" is also referred to as the _________ property.

An object is said to have a security clearance of a given level.

Inserting a new row at a lower level without modifying the existing row at the higher level is known as ________ .

Problems with providing strong computer security involve only the design phase.

The ________ access mode allows the subject neither read nor write access to the object but may invoke the object for execution.

The Biba models deals with confidentiality and is concerned with unauthorized disclosure of information.

The addition of multilevel security to a database system does not increase the complexity of the access control function.

A subject is said to have a security _________ of a given level.

One of the most influential computer security models is the Bell-LaPadula model.

When multiple categories or levels of data are defined,the requirement is referred to as __________ security.

"No write down" is also referred to as the *-property.