Lecture 2 Outline

Reading: text, §2, 3.1–3.2
Assignments: Homework 1, due on Apr. 11, 2018 at 11:59pm

1. Greetings and felicitations!
2. Access Control Matrix
   1. Subjects, objects, and rights
   2. Primitive commands
   3. Commands and conditions: create•file, various flavors of grant•right to show conditions and nested commands
3. Decidability of security
   1. Notion of leakage in terms of ACM
   2. Determining security of a generic system with generic rights and mono-operational commands is decidable
   3. Determining security of a generic system with generic rights is undecidable (HRU result)
   4. Meaning: can’t derive a generic algorithm; must look at (sets of) individual case

Matt Bishop Office: 2209 Watershed Sciences Phone: +1 (530) 752-8060 Email: [email protected]

ECS 153, Computer Security Version of April 3, 2018 at 7:37PM

You can also obtain a PDF version of this.