OS Protection

This scheme allows a procedure to be certified as trustworthy

Amplification of rights cannot be stated explicitly in declaration

It includes kernel rights such as read

All of the mentioned

Less privileges provide difficulty in executing admin tasks

Users can get temporary high privilege access

Users should be given just enough privileges to perform their tasks

None of the mentioned

principle of operating system

principle of least privilege

principle of process scheduling

none of the mentioned

data & software capability

address & data capability

hardware & software capability

software capability

Capabilities point indirectly to the objects

Each capability will not have a unique entry in global

Table entries cannot be reused for other capabilities

This system was adopted in MULTICS system

copy

transfer

limited copy

owner

all the resources

only those resources for which it has authorization

few resources but authorization is not required

all of the mentioned

Program is divided in data memory and program memory

Program is executed in segments

Program is divided into pieces having different access rights

It has effect of an unbounded architecture

worm

trojan

threat

virus

Role-based access control

Process-based access control

Job-based access control

None of the mentioned