Mandatory Access Control - Degrees of MAC System Strength

Degrees of MAC System Strength

In some systems users have the authority to decide whether to grant access to any other user. To allow that, all users have clearances for all data. This is not necessarily true of a MAC system. If individuals or processes exist that may be denied access to any of the data in the system environment, then the system must be trusted to enforce MAC. Since there can be various levels of data classification and user clearances, this implies a quantified scale for robustness. For example, more robustness is indicated for system environments containing classified Top Secret information and uncleared users than for one with Secret information and users cleared to at least Confidential. To promote consistency and eliminate subjectivity in degrees of robustness, an extensive scientific analysis and risk assessment of the topic produced a landmark benchmark standardization quantifying security robustness capabilities of systems and mapping them to the degrees of trust warranted for various security environments. The result was documented in CSC-STD-004-85. Two relatively independent components of robustness were defined: Assurance Level and Functionality. Both were specified with a degree of precision that warranted significant confidence in certifications based on these criteria.

Read more about this topic:  Mandatory Access Control

Famous quotes containing the words degrees of, degrees, system and/or strength:

    Complete courage and absolute cowardice are extremes that very few men fall into. The vast middle space contains all the intermediate kinds and degrees of courage; and these differ as much from one another as men’s faces or their humors do.
    François, Duc De La Rochefoucauld (1613–1680)

    When a thought of Plato becomes a thought to me,—when a truth that fired the soul of Pindar fires mine, time is no more. When I feel that we two meet in a perception, that our two souls are tinged with the same hue, and do as it were run into one, why should I measure degrees of latitude, why should I count Egyptian years?
    Ralph Waldo Emerson (1803–1882)

    You and I ... are convinced of the fact that if our Government in Washington and in a majority of the States should revert to the control of those who frankly put property ahead of human beings instead of working for human beings under a system of government which recognizes property, the nation as a whole would again be in a bad situation.
    Franklin D. Roosevelt (1882–1945)

    I realized that, while I would never be my mother nor have her life, the lesson she had left me was that it was possible to love and care for a man and still have at your core a strength so great that you never even needed to put it on display.
    Anna Quindlen (b. 1952)