Question

PLEASE ANSWER ALL THE QUESTIONS IN TERMS OF CYBERSECURITY AND OPERATING SYSTEM

Part 2: Answer all of the following questions

1. At a very high level, place the following operating systems in the Orange book class they could be evaluated at:

a) VAX VMM,

b) SELinux,

c) DOS,

d) Multics,

e) GEMSOS.

Explain why for each classification.

2. What is the difference between SELinux and VAX VMM in terms of their ability to provide a) Complete Mediation of security sensitive operations, b) complete mediation of all security sensitive operations on system resources and c) how we verify whether complete mediation is provided by the respective reference monitors?

Answer 1

1.
a. Class A1

• It uses DAC and MAC for the security controls.
• Formal verification and formal management are done for VAX VMM system.

b. Class B1

• SELinux comes under class B1 as it has implemented mandatory access control on the objects.
• Also, theoretical proof and testing are done.
• The above-mentioned features come under the B1 class.

c. Class D

• These are those systems that have not met any other category of security.
• For Example- A class must meet formal guidelines and provide high security and formal documentation and formal management is there.
• Class B must support MAC and it has sub-classification.
• Class C must support DAC and it has subclassification further.
• Since DOS does not meet any condition. So, it comes under D.

d. Class B2.

• Detailed information and documentation are produced on security.
• Also, user and admin privileges are differentiated.
• DAC and MAC, both are in use

e. Class A1

• This is the higher-level security of the orange class.
• protection from malicious software is there and MAC policy is ensured.
• Also, it has gone through a lot of testing criteria before its release.

Friend, this was a really nice question to answer. As per the Chegg policy, I am obliged to answer the first question. If you find my answer helpful, please like it. Thanks.