CSSLP: Certified Secure Software Lifecycle Professional

The Take-Grant Protection Model uses a directed graph of subjects, objects, and rights. Its take and grant rules specify how subjects can acquire rights from other subjects or transfer rights to them.

In VORAM, risk assessment establishes the relevant vulnerabilities and assesses the attacks that may exploit them. Selecting countermeasures through cost-benefit analysis and remediating a specific vulnerability are follow-on risk-treatment activities.

The Designated Approving Authority is the senior official who accepts the residual risk associated with a system and grants accreditation or authorization to operate.

Under DoDI 8500.2’s Mission Assurance Category definitions, MAC II requires high integrity and medium availability. MAC I requires high integrity and high availability, while MAC III has basic integrity and availability.

Attack surface increases when code is exposed through a globally reachable network interface, can be accessed anonymously, runs by default, or executes with elevated privileges. These conditions increase the code reachable by untrusted users or the potential impact of a successful exploit. Language choice and code churn affect review risk, but do not themselves expand the attack surface.