CS 6238 MIDTERM EXAM LATEST
QUESTIONS AND
ANSWERS 2026 - 2027
Reference Monitor - ANSWERS-Enforces an access control policy over
a subjects' ability to perform operations on objects on a system
TCB Requirements - ANSWERS-Tamper-proof: cannot alter
Complete Mediation: cannot be bypassed
Correctness: no vulnerabilities
Reflections on Trusting Trust - ANSWERS-Cannot trust software
system unless the people behind the system and entire tool chain can be
trusted
Ware Report - ANSWERS-Created to recommend safeguards that would
protect information in multiaccess resource sharing systems
Economy of Mechanism - ANSWERS-Design a system to use only a
small number of different types of security enforcement mechanisms.
More features there are more ways to attack the system
END OF
PAGE
1
, CS 6238 MIDTERM EXAM LATEST
QUESTIONS AND
ANSWERS 2026 - 2027
Least Privilege - ANSWERS-subjects should be granted the minimum
level of access needed
3 principals of security + 1 - ANSWERS-Security should be transparent
It should be easy to give access
It should be easy to restrict access
Establish reasonable defaults
Cyber Risk = - ANSWERS-Attack likelihood* attack impact
Design Principles - ANSWERS-Economy of Mechanism
Open Design
Least Privilege
Separation of Privilege
Fail-safe default
User Acceptability
Layered Defense
END OF
PAGE
2
QUESTIONS AND
ANSWERS 2026 - 2027
Reference Monitor - ANSWERS-Enforces an access control policy over
a subjects' ability to perform operations on objects on a system
TCB Requirements - ANSWERS-Tamper-proof: cannot alter
Complete Mediation: cannot be bypassed
Correctness: no vulnerabilities
Reflections on Trusting Trust - ANSWERS-Cannot trust software
system unless the people behind the system and entire tool chain can be
trusted
Ware Report - ANSWERS-Created to recommend safeguards that would
protect information in multiaccess resource sharing systems
Economy of Mechanism - ANSWERS-Design a system to use only a
small number of different types of security enforcement mechanisms.
More features there are more ways to attack the system
END OF
PAGE
1
, CS 6238 MIDTERM EXAM LATEST
QUESTIONS AND
ANSWERS 2026 - 2027
Least Privilege - ANSWERS-subjects should be granted the minimum
level of access needed
3 principals of security + 1 - ANSWERS-Security should be transparent
It should be easy to give access
It should be easy to restrict access
Establish reasonable defaults
Cyber Risk = - ANSWERS-Attack likelihood* attack impact
Design Principles - ANSWERS-Economy of Mechanism
Open Design
Least Privilege
Separation of Privilege
Fail-safe default
User Acceptability
Layered Defense
END OF
PAGE
2
