Outline for October 6, 2023

Reading: text, §5.2.2, 5.3, 6.1–6.2, 6.4}
Due: Homework 1, due October 9; Project teams, question, due October 11

1. Example: Trusted Solaris

2. Tranquility
   1. Declassification problem
   2. Strong tranquility
   3. Weak tranquility

3. Requirements of integrity models

4. Biba Model (strict integrity policy)

5. Clark-Wilson Model
   1. Theme: military model does not provide enough controls for commercial fraud, etc. because it does not cover the right aspects of integrity
   2. Components
      1. Constrained Data Items (CDI) to which the model applies
      2. Unconstrained Data Items (UDIs) to which no integrity checks are applied
      3. Integrity Verification Procedures (IVP) that verify conformance to the integrity spec when IVP is run
      4. Transaction Procedures (TP) takes system from one well-formed state to another

Matt Bishop Office: 2209 Watershed Sciences Phone: +1 (530) 752-8060 Email: [email protected]

ECS 235A, Computer and Information Security Version of October 6, 2023 at 3:10PM

You can also obtain a PDF version of this.