Exam 13: Trusted Computing and Multilevel Security

A component describes a specific set of security requirements.

A multilevel secure system for confidentiality must enforce:

An entire database such as a financial or personnel database cannot be maintained on a server with other files and still be classified as confidential or restricted.

The ________ control the manner by which a subject may access an object.

_________ rules are security policy restrictions on the behavior of IVPs and TPs.

One way to secure against Trojan horse attacks is the use of a secure,trusted operating system.

Functionality is the security features provided by a product.

A subject can exercise only accesses for which it has the necessary authorization and which satisfy the MAC rules.

The _______ access mode allows the subject both read and write access to the object.

An object is said to have a security ________ of a given level.

The Common Criteria for Information Technology and Security Evaluation are ISO standards for specifying security requirements and defining evaluation criteria.

The BLP model effectively breaks down when (untrusted)low classified executable data are allowed to be executed by a high clearance (trusted) subject.

_________ rules are built-in system security mechanisms that achieve the objectives of the certification rules.

To structure the need for assurance the CC defines a scale for rating assurance consisting of _____ evaluation assurance levels ranging from the least rigor and scope for assurance evidence to the most.

Multilevel security is of interest when there is a requirement to maintain a resource in which multiple levels of data sensitivity are defined.

The _________ model is aimed at commercial rather than military applications and closely models real commercial operations.

The __________ is a controlling element in the hardware and operating system of a computer that regulates the access of subjects to objects on the basis of security parameters of the subject and object.

"An individual (or role)may grant to another individual (or role)access to a document based on the owner's discretion,constrained by the MAC rules" describes the _________.

The _________ Model was developed for commercial applications in which conflicts of interest can arise.

The ________ is the government agency that monitors the evaluation process.