\documentclass[11pt]{article}
%\usepackage{palatino}
%\usepackage{latexsym}
%\usepackage{verbatim}
%\usepackage{alltt}
%\usepackage{amsmath,proof,amsthm,amssymb,enumerate}



\title{Reading Questions 5 (optional)}
\author{CMU 17-654/17-754: Analysis of Software Artifacts \\
        Jonathan Aldrich ({\tt jonathan.aldrich@cs.cmu.edu})}
\date{Due: Tuesday, April 19, 2005 (10:30 am) \\[1ex]
10 points total}


\begin{document}

\maketitle

\textbf{Readings:}

\begin{itemize}

\item Oleg Sheyner and Jeannette Wing.
Tools for Generating and Analyzing Attack Graphs.
Formal Methods for Components and Objects, 2004.

\item David Brumley and Dawn Song.
Privtrans: Automatically Partitioning Programs for Privilege Separation.

\item David Brumley and Dan Boneh.
Remote Timing Attacks are Practical.

\end{itemize}

%\textit{Note: When answering these weekly reading assignment questions
%be concise.  It is expected that each question set can be answered
%adequately in a page of text or less.  Rambling answers with
%irrelevant detail will not be received warmly. On the other hand,
%answers should contain enough detail to understand clearly what you
%are saying.  Good English grammar and syntax is important, as always.}

\vspace{1ex}

\noindent\textit{\textbf{Questions:}}
\begin{itemize}

\item At the end of section 4, Sheyner et al. suggest that actions
like applying system patches can be used to reduce the attack graph
until there are no possible attacks.  Does this suggest that attack
graphs are not useful if you have applied all security patches to a
system?  Why or why not?

\item Security analyses like the tainted analysis you have implemented
improve security by finding and eliminating explicit security holes.
A skeptic asks, since the Privtrans system does not help users
in finding errors such as buffer overflows, what good could it possibly
do to help security?  How would you answer the skeptic?

\end{itemize}


\end{document}
