Cissp - Domain 9 - Security Architecture And Design

Front 1

The _____ ______ model is a simple and intuitive model that assigns rights to subjects and objects. This model is also based upon the state machine model. This model identifies the access modes (read, write, etc) for each object that a subject can access. For each subject, there is one row in the matrix that defines the access modes for each object.

Back 1

The Access Matrix model

Front 2

The _______ ______ model is a variation of the access control model, in that it is based upon information flow and not access controls. This model makes it easier to look for cover channels and is often implemented in a lattice format.

Back 2

Information Flow

Front 3

______ ________ developed the lattice access control model. The mathematical structure of the lattice allows it to easily represent the different security levels. Every pair of elements has a greatest lower bound and a lowest upper bound. Every resource is also associated with one or more classes within the matrix. The classes stemmed from the military designations. A subject that is in the same or higher class can use objects that are in a particular class.

Back 3

Dorothy Denning

Front 4

-A plan and set of principles that describe the security services that a system is required to provide to meet the needs of its users, the system elements required to implement the services, and the performance levels required in the elements to deal with the threat environment.

Back 4

Security architecture

Front 5

-A schematic description of a set of entities and relationships by which a specified set of security services are provided by or within a system.

Back 5

Security model

Front 6

- The totality of protection mechanisms within a computer system, including hardware, firmware, and software, the combination of which is responsible for enforcing a security policy. The totality of protection mechanisms within a computer system -including hardware, firmware, and software - the combination of that is responsible for enforcing a security policy.

Back 6

Trusted computing base (TCB)

Front 7

the Clark-Wilson model addresses all three integrity goals –

Back 7

·Preventing unauthorized users from making modifications ·Maintaining internal and external consistency ·Preventing authorized users from making improper modifications.

Front 8

The _____ _____ model relies upon the well-formed transaction. This is a transaction that has been structured and constrained enough as to be able to preserve the internal and external consistency requirements. It also requires that there be a separation of duty to address the third integrity goal and external consistency.

Back 8

Clark-Wilson

Front 9

(color book and number) A Guide to Understanding Discretionary Access Control in Trusted Systems [Version 1, 9/30/87]

Back 9

NCSC-TG-003 [Neon Orange Book]

Front 10

A Guide to Understanding Audit in Trusted Systems [Version 2 6/01/88]

Back 10

NCSC-TG-001 [Tan Book]

Front 11

Trusted Product Evaluation - A Guide for Vendors [Version 1 3/1/88]

Back 11

NCSC-TG-002 [Bright Blue Book]

Front 12

Glossary of Computer Security Terms [Version 1, 10/21/88]

Back 12

NCSC-TG-004 [Aqua Book]

Front 13

Trusted Network Interpretation [Version 1 7/31/87]

Back 13

NCSC-TG-005 [Red Book]

Front 14

A Guide to Understanding Configuration management in Trusted Systems [Version 1, 3/28/88]

Back 14

NCSC-TG-006 [Orange Book]

Front 15

A Guide to Understanding Trusted Facility Management [6/89]

Back 15

NCSC-TG-015 [Brown Book]

Front 16

TCSEC classifications of systems
is no security (weakest)
is Mandatory
is verified (strongest)
is Discretionary

Back 16

D is no security (weakest)
C is Discretionary
B is Mandatory
A is verified (strongest)

Front 17

________ is an abstract machine which mediates all accesses to objects by subjects. This ensures that the subjects have the necessary access rights and protects the objects from unauthorized access.

Back 17

Reference monitor

Front 18

The ________ is the security problem most likely to exist if an operating system permits objects to be used sequentially by multiple users without forcing a refresh of the object.

Back 18

Disclosure of residual data

Front 19

A ________ will help define business functions that support the core area of the business for XPZ corporation. Through these definition, relationships and dependence on data can be identified and addressed.

Back 19

logical architecture

Front 20

__________ builds the components that will provide the services per the logical architecture.

Back 20

Technical Architecture

Front 21

A ________ is associated with moving data from its current state to the final state (in the situation part of application).

Back 21

conversion plan

Front 22

__________ is typically tied with relational database design which is not required in this situation as the application is being selected.

Back 22

Data Model

Front 23

_______ is a situation when the system does not have the resource free for other requests. A Denial-of-service attacks are known to exploit this limitation to cause deadlock for system peripherals such as memory, database or file access.

Back 23

Deadlock

Front 24

Database

DBMS?
DDL?
DML?

Back 24

Database

DBMS Database Management System
DDL Data Definition Language
DML Data Manipulation Language

Front 25

CPU terms
Scalar Processor
SuperScalar Processor
Pipelining

Back 25

CPU terms
Scalar Processor - One instructions at a time.
SuperScalar Processor - Concurrent instructions at a time.
Pipelining - combines steps of different processes

Front 26

Lattice Model

Information must flow into your _______ in order for you to access it.

Security labels that consist of ______ and ______.

Back 26

Lattice Model

Information must flow into your category in order for you to access it.

Security labels that consist of security levels and categories.

Front 27

Bell-LaPadula

Normal
Star
Stong Star

Back 27

Bell-LaPadula

Normal - No read up
Star - No write down
Stong Star - only same level

Front 28

BIBA & Clar Wilson have i's, they are concerned with _________.

Back 28

BIBA & Clar Wilson have i's, they are concerned with Integrity.

Front 29

BiBA
Opposite of BLP
simple integrity star
strong integrity star

Back 29

BiBA
Opposite of BLP
simple integrity star - No read down
strong integrity star - No write up

Front 30

Graham-Denning Model
Based off of what model?
Concerned with what three parts?

Back 30

Clark-Wilson
Objects, subjects, and rights.

Front 31

Harrison-Ruzzo-Ullman based off what model?
What is the difference in this model?

Back 31

Graham-Denning model
Instead of 8 controls, adds more for greater granularity.

Front 32

Chinese wall model by _____ and _____, is only concerned with _____ of ______.

Back 32

Chinese wall model by brewer and nash, is only concerned with conflict of interest.

Front 33

______ book (color)
Deals with Security
Has 4 classes
A
B
C
D

Back 33

Orange book (color)
Deals with Security
Has 4 classes
TCSEC
A - Verified protected
B - Mandatory protected
C - discretionary protected
D - Minimal Security

Front 34

ITSEC Functionality
This is the ______ standard
E1 through E5 mirrors the _____ book
________ is E0 through E6

Back 34

ITSEC Functionality
This is the European standard
F1 through F5 mirrors the Orange book
Assurance is E0 through E6

Front 35

ISO Standard, 2nd attempt.

EAL 1:
EAL 2:
EAL 3:
EAL 4:
EAL 5:
EAL 6:
EAL 7:

Back 35

ISO Standard, 2nd attempt.

EAL 1: Functionally tested

EAL 2: Structurally tested

EAL 3: Methodically tested and checked

EAL 4: Methodically designed, tested, and checked

EAL 5: Semi-Formally designed and tested

EAL 6: Semi-formally verified, designed, and tested.

EAL 7: Formally verified, designed, and tested

Front 36

ISO 17799

____ based and _____ approach

Back 36

ISO 17799

risk based and holistic approach