[Cisspstudy] Security Models

[Ashraf Amin]

Noninterference

---
Best Regards,
Ashraf Amin


 







 



Date: Fri, 26 Jun 2009 08:21:29 -0400
From: belinda.foster at gmail.com
To: cisspstudy at cccure.org
Subject: Re: [Cisspstudy] Security Models


Nimal --
 
Don should not be developing/working on code that's in production.  Period.  If I had to decide on a certain security model, I'd fail this question for sure because him working on code that staff members are affected by is a MAJOR distractor within this paragraph.
 
Belinda.


On Thu, Jun 25, 2009 at 5:10 PM, Nimal Gunarathna <ng949 at yahoo.com> wrote:






Hi,
 
This question is from Shon H's CISSP V4 Quiz Engine. I immediatly thought that this fall
into a certain security model based on a key statement here but I was wrong. Anyway you guys could dissect this ... 
 
Don is a senior manager of an architectural firm. He has just found out that a key contract was renewed, allowing the company to continue developing an operating system that was idle for several months. Excited to get started, Don begins work in the operating system privately, but cannot tell his staff until the news is announced publicly in a few days. However, as Don begins making changes in the software, various staff members notice changes in their connected systems, even though they work in a lower-security level. What kind of model could be used to ensure this does not happen?
_______________________________________________
cisspstudy mailing list
cisspstudy at cccure.org
http://cccure.org/mailman/listinfo/cisspstudy_cccure.org



_________________________________________________________________
Get the best of MSN on your mobile
http://clk.atdmt.com/UKM/go/147991039/direct/01/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090628/5012a5f6/attachment.html>