SB 4: A Language for Security

Question 1

Describe state and protection state

Answer 1

State: a collection of current values in a system
Protection state: the subset of those values that deal with protection

Question 2

What is an Access Control Matrix?

Answer 2

A tool that can describe the current protection state of the system.

Question 3

Describe the Access Control Matrix Model

Answer 3

The most precise model to describe protection states. Describes the rights of all subjects over all entities. All protected entities are called objects. Active objects (processes and users) are called subjects. The relationship between them is called rights. An abstract model.