))
EP 109: SDP 7: Complete Mediation
Manage episode 383039921 series 3368188
Content provided by Kip Boyle. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Kip Boyle or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
https://www.yourcyberpath.com/109/
In this episode, we are returning to the Security Design Principles series, this time with Complete Mediation.
Complete mediation means the system checks the user trying to access a file or perform an action is authorized to access this file or perform this action.
Complete mediation is also implemented in the security reference monitor (SRM) in Windows operating systems. The SRM checks fully and completely that a user has access to perform an action each time they try to perform it.
It also ties back to one of the three As of cybersecurity, which is Authorization, since the user has to prove having access to something when they request it.
Complete mediation can be a huge challenge to usability, and it might be something that interferes with your operations. That’s where you need to understand that the security design principles are not a compliance list and that you should use them to enhance your systems. You should not be trying to get every principle to 100%.
What You’ll Learn
● What is complete mediation?
● What are some examples of complete mediation?
● How is complete mediation implemented in Windows?
● What are the challenges of complete mediation?
Relevant Websites For This Episode
● Akylade Certified Cyber Resilience Fundamentals (A/CCRF)
● IRRESISTIBLE: How to Land Your Dream Cybersecurity Position
● The Cyber Risk Management Podcast
Other Relevant Episodes
● Episode 103 - SDP 4: Compromise Recording
116 episodes
Share
