Homework #8 Security & Debugging

Hand out: 2020-06-12

Deadline: 2020-06-19 23:59 (GMT+8) No Extension!

TA in charge: DONG Zhiyuan (zydong829 \at sjtu.edu.cn )

Submit: OC platiform

1. What are the three fundamental requirements addressed by computer security?
2. What is the relation between access control list and capabilites?
3. What's the threat model of enclave? Why enclave's threat model is reasonable? When designing enclave, why do we must be careful of side-channel attacks?
4. When doing pressure testing on I/O, do we need to saturate the the other resources (memory, CPU)?
5. In fuzzing test?syzkaller generates different inputs to the operating system by constructing system calls in user mode. Is there any other way to generate input for the operating system?