SystemsSec 2016W Lecture 11

- what properties should a secure OS have?  Why?
- why are production operating systems not constructed like ones designed for security first?  Be specific
- To what extent are security tools (for attack and defense) hard to use?  Are these difficulties inherent to the technology or are other factors in play?  Give examples from your personal experience.
- describe three threat models and explain what entities these threat models apply to.