Cissp Lesson 6

Front 1

Name 6 Memory Addressing Methods

Back 1

1. Absolute Addressing - primary memory
2. Direct Addressing - uses actual data location as part of address
3. Implied Addressing - only for internal processing
4. Indexed Addressing - capable of accessing a range of memory addresses.
5. Indirect Addressing - uses a program address scheme.
6. Register Addressing - assigns to the registers with the cpu

Front 2

Bell-LaPadula Model (BLP)

Back 2

users can't access data above their classification level.
users can't alter data in lower classification levels.
Users can have read/write access to only user's classification level

Front 3

Take-Grant Model

Back 3

Allows users to grant permissions to others.

Front 4

Biba Integrity Model

Back 4

read data at their integrity level and higher.
write data at their integrity level and lower

Front 5

Clark-Wilson Integrity Model

Back 5

can only perform authorized functions through apps, transactions, etc. Ensures both integrity and proper transaction performance.

Front 6

Chinese Wall

Back 6

For working with consultants. A/K/A Brewer Nash Model

Front 7

Lattice Model

Back 7

Higher security requiring more controls and lower security requiring less controls. Uses Bell-LaPadula structure of access.

Front 8

Non-interference

Back 8

Data manipulated at one classification level cannot affect the data at any other level.

Front 9

Trusted Computer Base

Back 9

Any hardware, software, or process that enforces the computer system security policy. Uses and maintains a separate domain.

Front 10

Reference Monitor

Back 10

A policy that monitors all access in the computer system. Must be unchangeable, verified, and always running.

Front 11

Security Perimeter

Back 11

The security kernal plus any other TCB security measures isolating it from the rest of the system. Anything outside is not withing the TCB.

Front 12

Layering

Back 12

Separates data into functional areas. They communicate with each other.

Front 13

Data hiding

Back 13

Data layers that are separated and told not to communicate with each other.

Front 14

Covert Channel TCB Vulnerability

Back 14

Unauthorized access through a shared communication, often access through storage areas.

Front 15

Maintenance Hook TCB Vulnerability

Back 15

A trap door allowing unauthorized access.

Front 16

Parameter Checking TCB Vulnerability

Back 16

Fooling the buffer overflow to allow unauthorized access.

Front 17

Time of Check to Time of Use (TOC/TOU)

Back 17

Takes advantage of when the security controls are implemented

Front 18

Name 5 Data Recovery Levels

Back 18

1. Cold start - The TCB or media fails and is unable to restart within a secure state.
2. Fail soft or resistant - Computer continues to run when noncritical computer processes fail.
3. Fail over - Computer activates an alternate process when one fails.
4. Fail safe - Computer processes stop and system reamins protected.
5. Fault Tolerant - Computer fails but still runs.

Front 19

Compartmented Security Mode

Back 19

Allows multiple layers of classification. Handles only users w/ same clearance but requiring access to only segments of data

Front 20

Dedicated Security Mode

Back 20

Allows single layer classification. Handles only users w/ same clearance and ability to perform the same processes. Military

Front 21

Multi-Level Security Mode

Back 21

Allows multiple layer classification. Multiple level clearance, and multiple access and functionality requirements.

Front 22

System High Security Mode

Back 22

Allows single layer classification at the highest level. Handles only the highest level clearance, but requiring access to only segments of data.

Front 23

What 3 items are used to define the security mode?

Back 23

1. Sensitivity of data
2. Clearance level of data
3. Functions users perform on the data.

Front 24

Trusted Computer System Evaluation Criteria (TCSEC)

Back 24

Part of rainbow series(orange book). It does not handle system integrity.

Front 25

Name the TCSEC Security Layers

Back 25

D - Minimal protection, C1 - access is determined by each user, C2 - Security controlled via logon authentication(COTS), B1 - Requires policy for labeling & access control, B2 - Strict authentication and covert channel security, B3 - Resistant to intrusion and capable of trusted recovery., A1 - verified protection

Front 26

Trusted Network Interpretation(TNI)

Back 26

U.S. Dept. of Defense's implementation of TCSEC. Red book. Biba model recommended.

Front 27

IT Security Evaluation Criteria (ITSEC)

Back 27

European Counterpart to TCSEC. Requirements for integrity and Availability.

Front 28

Common Criteria

Back 28

Combination of TCSEC, ITSEC, and CTCPEC. Uses EALs.

Front 29

Defense IT Security Certification & Accreditation Process (DITSCAP)

Back 29

U.S. Government standard. Certified and Accredited.

Front 30

National Information Assurance Certification & Accreditation Process (NIACAP)

Back 30

U.S. government standard. Certified and Accredited. Must meet requirements throughout its entire lifecycle.

Front 31

Evaluation Assurance Level (EAL)

Back 31

7 levels of assurance w/in the Common Criteria. EAL1(Functionally tested)to EAL7(Formally verified design and tested)