Question

Hi I have a system security question if someone could help me

2. Which general security principle is violated in the following pseudo-code? Modify the pseudo-code to fix the potential security problem. permit - CheckAccess ) IF (permit = Access-Denied) Print "Access Denied" Print "Access Granted" Run Function) ELSE

Answer 1

Three general security principles are -

1. Confidentiality (also known as secrecy), meaning that the computing system’s assets can be read only by authorized parties.

2. Integrity meaning that files can be modified in an authorized manner.

3. Availability means service is provided in a timely manner, denial of which is also known as Denial of Service (DoS).

In given pseudo-code, Integrity is violated because there is no means for measuring authorization on the basis of credentials. The modified pseudo-code can hence be written as-

permit = checkAccess();

IF (permit != Access_Granted)

Print ("Access Denied.");

ELSE

IF (CheckCredentials == TRUE) // Authorization

Run Function ();

ELSE

Print ("Wrong Credentials");

exit ();