Question: Construct an access control matrix for the subjects and objects of Lipner's commercial model (see below). The matrix will have entries for r(read) and w(write)

Construct an access control matrix for the

Construct an access control matrix for the subjects and objects of Lipner's commercial model (see below). The matrix will have entries for r(read) and w(write) rights. Show that this matrix is consistent with the following requirements: 1. Users will not write their own programs, but will use existing production programs and databases. 2. Programmers will develop and test programs on a nonproduction system; if they need access to actual data, they will be given production data via a special process, but will use it on their development system. 3. A special process must be followed to install a program from the development system onto the production system. 4. The special process in requirement 3 must be controlled and audited. 5. The managers and auditors must have access to both the system state and the system logs that are generated Subjects Security Clearance Integrity Clearance Ordinary users (SL, (SP) (ISL. (IP) Application developers (SL, (SD)) (ISL. (ID)) System programmers (SL, (SSD) (ISL, (ID)) System managers and auditors (AM, (SP, SD, SSD )) (ISL(IP, ID)) System controllers (SL, (SP, SD )) and downgrade privilege (ISP, CIP, ID)) Repair (SL, (SP) (ISL, (IP Objects Security Level Integrity Level Development code/test data (SL, (SD) (ISL (IP) Production code (SL, (SP) (10, (IP) Production data (SL. (SP) (ISL (IP) Software tools (SL. () (10. (ID)) Systern programs (SL, ( ) (ISP, CIP, ID)) System programs in modification (SL. (SSD) (ISL. (ID)) System and application logs (AM,( appropriate categories >> (ISL. ( ) Repair (SL (SP) (ISL (IP) VWww comments) Construct an access control matrix for the subjects and objects of Lipner's commercial model (see below). The matrix will have entries for r(read) and w(write) rights. Show that this matrix is consistent with the following requirements: 1. Users will not write their own programs, but will use existing production programs and databases. 2. Programmers will develop and test programs on a nonproduction system; if they need access to actual data, they will be given production data via a special process, but will use it on their development system. 3. A special process must be followed to install a program from the development system onto the production system. 4. The special process in requirement 3 must be controlled and audited. 5. The managers and auditors must have access to both the system state and the system logs that are generated Subjects Security Clearance Integrity Clearance Ordinary users (SL, (SP) (ISL. (IP) Application developers (SL, (SD)) (ISL. (ID)) System programmers (SL, (SSD) (ISL, (ID)) System managers and auditors (AM, (SP, SD, SSD )) (ISL(IP, ID)) System controllers (SL, (SP, SD )) and downgrade privilege (ISP, CIP, ID)) Repair (SL, (SP) (ISL, (IP Objects Security Level Integrity Level Development code/test data (SL, (SD) (ISL (IP) Production code (SL, (SP) (10, (IP) Production data (SL. (SP) (ISL (IP) Software tools (SL. () (10. (ID)) Systern programs (SL, ( ) (ISP, CIP, ID)) System programs in modification (SL. (SSD) (ISL. (ID)) System and application logs (AM,( appropriate categories >> (ISL. ( ) Repair (SL (SP) (ISL (IP) VWww comments)

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer

Step: 1 Unlock blur-text-image

Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock

Step: 3 Unlock

Students Have Also Explored These Related General Management Questions!

Construct an access control matrix for the subjects and objects of Lipner's commercial model (see below). The matrix will have entries for r (read) and w (write) rights. Show that this matrix is...

6. There are systems in the Development and Production. The development systems DS have lower integrity level than the production systems PS. The integrity level of PS is higher than that of DS....

2. (10 pts) A company has systems in Development and Production. The development systems DS has lower integrity level than the production systems PS. Consider the rights r (read), w while System...

4. A company has systems in the Development and Production. The development systems DS have lower integrity level than the production systems PS. Consider the rights r (read), w (write) and m...

Java Instructions Access control matrix For this homework, you will implement a simple security program using access control matrix. You will load a plain text le with the following format. alice,...

This question involves the use of AGGREGATE linear PYTHOIN regression on the Auto data set. (a) Perform a simple linear regression with mpg as the response and horsepower as the predictor. Describe...

Language: Java - Just need some help starting it out. Purpose: To implement an authorization system using access control matrix. Instructions: - Access control matrix: For this task, you will...

answer all questions promptly What is the maximum segment length of a 100Base-FX netdwork,Thelast character('X', etc) refers to the line code method used. Line code is a pattern of voltage, current...

CYPR 7443 Module 6 Assignment 1. Consider that GeoGold maintains the following mission terrain data as objects: Asia data, Europe data, South America data, Australia data, and North America data....

Should the Reduced Tax Rate on Dividends Affect an MNCs Capital Structure? Point No. The change in the tax law reduces the taxes that investors pay on dividends. It does not change the taxes paid by...

Consider the campus dietitian's problem presented in Chapter 3 as Problem 3-33 on page 112. Use Solver to create the Sensitivity Report for this LP problem. Use this report to answer the following...

Complaints based on Title VIII should be filed with the National Association of REALTORS ( R ) local board National Civil Rights Commission Office of Equal Opportunity

Case Greenbuilders Pte Lid ("GPL") is a local construction company which specialises in providing bespoke Design and Build construction services for private residential homes that are designed to be...