Mandatory Access Control - Degrees of MAC System Strength

Degrees of MAC System Strength

In some systems users have the authority to decide whether to grant access to any other user. To allow that, all users have clearances for all data. This is not necessarily true of a MAC system. If individuals or processes exist that may be denied access to any of the data in the system environment, then the system must be trusted to enforce MAC. Since there can be various levels of data classification and user clearances, this implies a quantified scale for robustness. For example, more robustness is indicated for system environments containing classified Top Secret information and uncleared users than for one with Secret information and users cleared to at least Confidential. To promote consistency and eliminate subjectivity in degrees of robustness, an extensive scientific analysis and risk assessment of the topic produced a landmark benchmark standardization quantifying security robustness capabilities of systems and mapping them to the degrees of trust warranted for various security environments. The result was documented in CSC-STD-004-85. Two relatively independent components of robustness were defined: Assurance Level and Functionality. Both were specified with a degree of precision that warranted significant confidence in certifications based on these criteria.

Read more about this topic:  Mandatory Access Control

Famous quotes containing the words degrees of, degrees, system and/or strength:

    Gradually we come to admit that Shakespeare understands a greater extent and variety of human life than Dante; but that Dante understands deeper degrees of degradation and higher degrees of exaltation.
    —T.S. (Thomas Stearns)

    No sooner met but they looked; no sooner looked but they loved; no sooner loved but they sighed; no sooner sighed but they asked one another the reason; no sooner knew the reason but they sought the remedy; and in these degrees have they made a pair of stairs to marriage, which they will climb incontinent, or else be incontinent before marriage.
    William Shakespeare (1564–1616)

    In the end we beat them with Levi 501 jeans. Seventy-two years of Communist indoctrination and propaganda was drowned out by a three-ounce Sony Walkman. A huge totalitarian system ... has been brought to its knees because nobody wants to wear Bulgarian shoes.... Now they’re lunch, and we’re number one on the planet.
    —P.J. (Patrick Jake)

    I believe that Harmon would be the easiest to defeat, though he might gain much strength from the Republicans. Clark would surely lose New York. I am beginning to feel that by some stroke of genius they may name Woodrow Wilson, and that seems a pretty hard tussle.
    William Howard Taft (1857–1930)