I initially started making the program in C as it coincided with what I was learning in Systems Programming. I ran into problems with input functionality and with my workload, I couldn’t justify sticking with my initial approach. I moved on to python where I ran into another hurdle pertaining to curses although I was really adamant in having my program run in a terminal. I ended up veering away from my application utilizing a terminal window and opted in for the python console. Looking online, it seemed at the time that there was only one security focus package being cryptography although I later found bcrypt which will be the package used for hashing and salting the inputs.

My program starts by requiring a username and password to be authenticated to read and write files. I made a 2 dimensional array of username:password:clearance_level with the number being denoted as a numerical value to allow for BLP and Biba model functionality. Regarding the BLP and Biba model, it wasn’t specified whether or not to leave that to the user. In terms of class concepts, the MLS, BLP and Biba model mentioned above as well as hashing and salting. There wasn’t anything unique about design decisions made for this program although I wanted to do a lot more than I did. The program is fully functional and with little modification, could scale with more users and passwords. In terms of optimization, the program is rather wasteful in resources and I acknowledge that could have definitely been improved.

Technologies Used:

• Python, C (Initial Implementation)
• External Packages: N/A

Starts by requiring a username and password for authentication. (i.e U: SaburouTakumi P: h3wZd9SR) Requirements through main such as: Character Limit, Key limit Username is validated through comparing the username given in stdin with name in 'database' Func index_2d is utilized to get the position of an name:pass:level group. Objective, User, is created The instructions were vague with introducing a BLP or Biba model so I give the 'Users' options of what model to follow

Given a 'Users' level, the 'User' is prompted with what files (stored locally) are available to read and write

Build simple shell with operations for text files

• CreateUser level, level-compartment
• Login – specify username password
• Read output contents to screen
• Write text to be written to file
• SetPermissions level(required) compartment(s)(optional)

Basically what you need to implement is a file that has entries of user names, hashed passwords with salts and authentication level (UNCLASSIFIED,CLASSIFIED,TOPSECRET) with a couple of compartments (ie. TOPSECRET{CS492}, CLASSIFIED{CS492,CS1}). When the user tries to login implement basic authentication using a salt. (You don’t need to implement the hash algorithm you can use a prebuilt one such as the one in java.security.) After the user logs in the user’s privileges (what they are allowed to do) correspond with their authentication level. When you login you should be able to specify BLP or Biba which will be enforced.

For your demo you should be able to create a user with access to different levels of different compartments and demonstrate BLP and Biba applied to your model