- In computer security, Saltzer and Schroeder enunciated the following principles of secure systems: (a) Simplicity—the accuracy of security measures, incorporated in hardware and software, can be more readily checked if those measures are simple and small.(b) Fail safe—accesses should require explicit authorization (i.e. the default situation is no access).(c) Complete mediation—checking of access against access control information must be performed under all circumstances including normal operation, maintenance, recovery, etc. (d) Separation of privilege—a twokey philosophy, with each key located in a separate compartment, ensures that a single failure does not result in a security break.(e) Least privilege—every process should operate with the minimum level of privilege necessary to perform the requisite task.(f) Least common mechanism—the use of shared mechanisms among users should be minimized for their mutual security. (g) User acceptability—security measures should not unduly interfere with the work of users while, of course, fulfilling all necessary security constraints. (h) Public scrutiny—security measures should be available for review by experts (e.g., encryption arithmetic can be widely publicized, with their security depending only on the secrecy of the cryptographic key).; 在計算機安全學中,Saltzer和Schroeder闡明了安全系統(tǒng)的以下原則: (1) 簡單性—簡單的安全措施在硬件、軟件的共同參與下其正確性很容易檢查。(2) 故 障保險——存取操作都要求有明確的特許(即缺省情況下沒有存取權限)。(3) 安全仲裁—— 在任何情況下,包括正常操作、維護、修復等都必須檢查操作控制信息。(4) 權限分離—— 一種雙保險策略,每個保險分別位于一個獨立的部分,保證一個損失不會造成整個安全性受 損。(5) 最少權限——每一進程都在任務所需的最低權限下工作。(6) 最少共同機構——用 戶間共享的機構應限制到最小程度。(7) 用戶可接受性——安全措施應當既不過于干涉用 戶的工作,又滿足所有應有的安全性限制。(8) 公開審查——安全措施必須可以由專家進行 評審(例如,加密算法可以公之于眾,其安全性僅依賴于密鑰的保密程度)。
下載手機詞典可隨時隨地查詞查翻譯