Lecture 21 homework: Security

Handed out: Wed, November 30, 2005
Due: Mon, Dec 5, 2005
Read: Asbestos, skipping sections 5.4, 5.5, 6, 8, and 9 (but do read Section 7).

Hand-In Procedure

You are to turn in this homework during lecture. Please write up your answers to the questions below and hand them in to a 6.828 staff member by the end of the lecture.

Suppose that the Asbestos OK Web Server's database process has some malicious code in it, inserted by a disgruntled programmer. Could the malicious code reveal private data in bad ways, and if so, how? Are there other bad things the database process could do? Are there bad things that Asbestos prevents the database process from doing, that would probably be possible on (for example) JOS or UNIX v6?

This completes the homework.