QuestionQ239

VerifiedSystems and Application Security

If an operating system allows shared resources, such as memory, to be used sequentially by multiple users/applications or subjects without refreshing the objects/memory area, which security problem is MOST likely to exist?

Explanation

Failure to clear a shared resource before reallocating it can make information from a prior user or process available to the next user or process. This is disclosure of residual data; NIST defines residual information protection as ensuring that data in a resource is unavailable when that resource is deallocated from one object and reallocated to another.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!