Thursday, April 2, 2009

SecuriTest : Overview

What is SecuriTest ?

UseCases – SecuriTest Student


1. Student runs SecuriTest & enters Student ID and Password

e.g. EEET2250

Password: lab3



2. Student uses Window listed with FULL title (default deny mode)

e.g. title of this doc in word is:

09Feb-Use Cases List Ver2.0.doc –Microsoft Word

Only a window with this title is allowed nothing else,

Are there any exceptions ?

Of course Securitest is an exception and the log on window is.



3. Student uses Application listed by – title (default deny mode)

e.g. Microsoft Word

allows any window which contains the phrase “Microsoft Word”

to be used.

Thus: 09Feb-Use Cases List Ver2.0.doc –Microsoft Word

Would be allowed





4. Student uses Application listed by single word match mode (default deny mode)

e.g. Word to match: “Microsoft”

allows any window with the word Microsoft to run,

or: Word: “Firefox”

allows any window containing the phrase “Firefox” to run.



5. Student attempts use of Window listed with FULL title (default permit mode)

e.g.

only the window with title

09Feb-Use Cases List Ver2.0.doc –Microsoft Word

Is NOT allowed to run.



6. Student attempts use of Application listed by – title (default permit mode)

e.g. Word to match: “Microsoft”

DENIES any window with the word Microsoft from running,

or: Word: “Firefox”

DENIES any window containing the phrase “Firefox” from running .



7. Student attempts use of Application listed by single word match mode (default permit mode)

8. Student submits using normal submission method

9. Student submits using tutor approval submission method

10. Student attempts to copy a file whilst in the save dialog box (block copy/cut enabled)

11. Student attempts to cut a file whilst in the save dialog box (block copy/cut enabled)

12. Student attempts to copy a file whilst in the save dialog box (block copy/cut disabled)

13. Student attempts to cut a file whilst in the save dialog box (block copy/cut disabled)



Special Cases

1. Student executes a command which opens a command prompt in the submission directory (to be expanded to have permit/deny from file)



Additional Use Cases not Implimented yet

- Case sensitivity/insensitivity what is the current default ????

- Logical control eg &, | etc to control access lists (This is essentially what you were getting at with your UserCase 3)

“User Case:3: heiko the genius

all 3 words in any order, ....whether before or after the '-' dash, the window is blocked.”