Exam 13: Trusted Computing and Multilevel Security

The _______ is a hardware module that is at the heart of a hardware/software approach to trusted computing.

_________ secure is a class of system that has system resources at more than one security level and that permits concurrent access by users who differ in security clearance and need-to-know,but is able to prevent each user from accessing resources for which the user lacks authorization.

Problems with providing strong computer security involve only the design phase.

An object is said to have a security ________ of a given level.

The BLP model includes a set of rules based on abstract operations that change the state of the system.

The ________ is the government agency that monitors the evaluation process.

In the United States the ______ and the NSA jointly operate the Common Criteria Evaluation and Validation Scheme.

The BLP model effectively breaks down when (untrusted)low classified executable data are allowed to be executed by a high clearance (trusted) subject.

The __________ service is responsible for booting the entire operating system in stages and assuring that each portion of the OS,as it is loaded,is a version that is approved for use.

The addition of multilevel security to a database system does not increase the complexity of the access control function.

The Common Criteria for Information Technology and Security Evaluation are ISO standards for specifying security requirements and defining evaluation criteria.

A subject is said to have a security _________ of a given level.

Functionality is the security features provided by a product.

The Biba models deals with confidentiality and is concerned with unauthorized disclosure of information.

A multilevel secure system for confidentiality must enforce:

One way to secure against Trojan horse attacks is the use of a secure,trusted operating system.

_________ rules are built-in system security mechanisms that achieve the objectives of the certification rules.

__________ data are data that may be derived from corporate data but that cannot be used to discover the corporation's identity.

The _______ access mode allows the subject both read and write access to the object.

Multilevel security is of interest when there is a requirement to maintain a resource in which multiple levels of data sensitivity are defined.