Question

1. What are the methods of defense and provide examples? How do you deal with the damage?

2. Explain fundamental principles in both the Bell-LaPadula and Biba security models. For each, clarify what sort of security the model is intended to provide, two key properties of the model, and then elucidate why each of the properties makes sense from a security standpoint.

3. What is dissimilarity between inference and aggregation? Give an instance of each, and describe at least one way to mitigate each type of vulnerability.

4. When do we say that an operating system is confidential?

5. Describe dissimilarity between least privilege and separation of duty. Which one would you use to secure an Accounting system and why with reasons?

6. When is use of qualitative risk analysis preferable to quantitative methods?