Security in Computing 5th Edition by Shari Lawrence Pfleeger, Charles P Pfleeger, Jonathan Margulies

Exercise 29

The system must control applets’ accesses to sensitive system resources, such as the file system, the processor, the network, and internal state variables. But the term “the file system” is very broad, and useful applets usually need some persistent storage. Suggest controls that could be placed on access to the file system. Your answer has to be more specific than “allow all reads” or “disallow all writes.” Your answer should essentially differentiate between what is “security critical” and not, or “harmful” and not.

Step 1 of 2

The abstraction for storing the data, retrieving data, and updating data in the file is known as file system. Applets are the small applications that are used to perform the specific tasks. The scope of the applets is the entire program.

The data that could not be made public are known as sensitive data. The data are divided according to different degrees of sensitivity. Data base administrator is the person who is responsible for allowing the access to the users. The data are placed in different tables according to the level of sensitivity. All the tables are related through common key.

The applets can access the sensitive data in some cases. So, to protect the data of the file, the file system must have to use some of the control to secure access. The file system must have to know the difference between “allow to all reads” and “disallowing all the read operations.”