QuestionQ672

Security Concepts and Practices

A Security Kernel is defined as a strict implementation of a reference monitor mechanism that enforces a security policy. What three basic conditions must the kernel satisfy to be secure?

  • A Confidentiality, Integrity, and Availability
  • B Policy, mechanism, and assurance
  • C Isolation, layering, and abstraction
  • D Completeness, Isolation, and Verifiability
Explanation

A secure reference-monitor implementation must mediate every relevant access request completely, remain isolated so it cannot be bypassed or tampered with, and be sufficiently verifiable for its correctness to be analyzed and assured.

Community Discussion

No comments yet. Be the first to start the discussion!