Exaplin

(Chapter 5 Question 2, p71 in Introduction to Computer Security) Given the security levels TOP SECRET, SECRET, CONFIDENTIAL, and UN- CLASSIFIED (ordered from highest to lowest), and the categories A, B, and C, specify what type of access (read, write, both, or neither) is allowed in each of the following situations. Assume that discretionary access controls allow anyone access unless otherwise specified.

a) Paul, cleared for (TOP SECRET, { A, C }), wants to access a document classified (SECRET, { B, C }).

b) Anna, cleared for (CONFIDENTIAL, { C }), wants to access a document classified (CONFIDENTIAL, { B }).

1

ECE 443/518 Computer Cyber Security, Fall 2018 2 c) Jesse, cleared for (SECRET, { C }), wants to access a document classified

(CONFIDENTIAL, { C }).

d) Sammi, cleared for (TOP SECRET, { A, C }), wants to access a document

classified (CONFIDENTIAL, { A }).

e) Robin, who has no clearances (and so works at the UNCLASSIFIED level),

wants to access a document classified (CONFIDENTIAL, { B }).