Exam 13: Trusted Computing and Multilevel Security

_________ rules are security policy restrictions on the behavior of IVPs and TPs.

"No write down" is also referred to as the *-property.

When multiple categories or levels of data are defined,the requirement is referred to as __________ security.

The __________ is a controlling element in the hardware and operating system of a computer that regulates the access of subjects to objects on the basis of security parameters of the subject and object.

Security classes are referred to as __________.

A subject can exercise only accesses for which it has the necessary authorization and which satisfy the MAC rules.

"No read up" is also referred to as the _________ property.

The _________ model is intended to deal with the case in which there is data that must be visible to users at multiple or all security levels but should only be modified in controlled ways by authorized agents.

Inserting a new row at a lower level without modifying the existing row at the higher level is known as ________ .

An object is said to have a security clearance of a given level.

The ________ access mode allows the subject only write access to the object.

"An individual (or role)may grant to another individual (or role)access to a document based on the owner's discretion,constrained by the MAC rules" describes the _________.

________ is when a new document consolidates information from a range of sources and levels so that some of that information is now classified at a higher level than it was originally.

An entire database such as a financial or personnel database cannot be maintained on a server with other files and still be classified as confidential or restricted.

To structure the need for assurance the CC defines a scale for rating assurance consisting of _____ evaluation assurance levels ranging from the least rigor and scope for assurance evidence to the most.

A component describes a specific set of security requirements.

A _______ is a collection of requirements that share a common focus or intent.

One of the most influential computer security models is the Bell-LaPadula model.

The _________ model is aimed at commercial rather than military applications and closely models real commercial operations.

Trusted computing provides three basic services: authenticated boot,certification, and _________.