System Security

Question 1

Protection Domains

Answer 1

• create set of domain with users who have certain rxw permissions
• domains cover access privileges
• can be represented in matrix

Question 2

Access Control Lists

Answer 2

• os maintains access per object

- are stored in kernel

Question 3

Discretionary vs. Mandatory Access Control

Answer 3

• D AC assumes owner can change privilege

- M AC ensures that polices are enforced by system

Question 4

Bell-LaPadula Model

Answer 4

• higher level means higher trust and higher responsibility
• no read up
• no write down

Question 5

Biba Model

Answer 5

• no write up
• no read down
• integrity is here first priority

Question 6

Hypervisor Types

Answer 6

Type-1: hypervisor fiercely executes on hardware

Type-2: hypervisor runs on host os