Page 245 - CISSO_Prep_ Guide

• Page fault: The signal saying the page
is not in primary storage but is in
secondary storage. This is not a
problem.
• Page fault error: The system cannot
find the page in RAM or on HD.
• Trusted Computing Base (TCB)
• The totality of protection mechanisms
that are responsible for enforcing a
security policy.
• Subjects: active entities like users or
programs accessing data.
• Objects: passive entities like
files/data.
• Reference monitor: An abstract
machine that examines all requests
from a subject for access to an object
and determines if that request is
allowed. The determination of the
access is made by consulting the
security kernel, which may consist of
such things as access control lists,
LDAP database, password file,
authentication server, etc.
• Security kernel: hardware/software
elements of TCB that implement
reference monitors.

Computer Architecture Protection Concepts
• Process isolation preserves an object’s
integrity and the subject's adherence to