The University of Texas at Arlington Segmentation and Paging Questionnaire

Homework 2Submission Deadline: June 23, 2021 11:59 PM
Instructions:
i)
ii)
Submit on Canvas before deadline.
You can type your answer or upload a clear picture of your work as a single pdf
document.
1.
(i)
(ii)
(iii)
Explain segmentation and paging.
(5+5=10 points)
From point of view of data security, what is advantage of segmentation over
paging? Explain why.
(5 points)
What is advantage of paging over segmentation? Explain why.
(5 points)
2. Consider the following access control matrix.
O1
O2
O3
S1
orw
r
S2
r
orwx
S3
rwx
a)
b)
c)
d)
e)
rw
O4
O5
O6
o
R
rwx
r
r
R
r
What is the access control list for O4?
(5 points)
What is the access control list for O1?
(5 points)
What is the capability list for S1?
(5 points)
What is the capability list for S3?
(5 points)
You have to add a user who can only read all objects. How would you do it if your OS
used
i.
Access Control List
(5 points)
ii. Capability List
(5 points)
f) You have to add an object that can read only by users S1 and S2. How would you do it
if your OS used
i.
Access Control List
(5 points)
ii. Capability List
(5 points)
3. What is brute force attack? What is rainbow table attack? Explain their differences. As an
attacker when would you prefer one attack over the other and why? (5X4=20 points)
4. Consider the following security clearance levels in an organization.
Levels
Subject
Objects
CEO
Person A
Object 1
Supervisor
Person B
Object 2
Engineer
Person C
Object 3
Clerk
Person D
Object 4
Using the above table, cite ONE example of the violation of the following (4*5=20 points)
i)
Bell-Lapadula Simple Security Property
ii)
Bell-Lapadula *-Property
iii)
Biba Integrity Single Integrity Condition
iv)
Biba Integrity *-Property