[CCCure CISSP] CISSPstudy Digest, Vol 20 Polyinstantiation vs Polymorphism?
AbuHuraira Z. Abdelhalim
abuza56 at yahoo.com
Thu Feb 11 09:14:58 EST 2010
Good Luck Tom,
Polymorphism means makes copies of objects and makes changes to those copies; it is related to an object-oriented programming language like Java and C++, it is not related to the database view and that is the major differnce.
Polyinstantiation is related to the database view which means multiple distinct differences between data within objects to discourage lower-level subjects from learning information at a higher-level of security.
Thanks
AbuHuraia
--- On Thu, 2/11/10, twitwicki at hannaford.com <twitwicki at hannaford.com> wrote:
From: twitwicki at hannaford.com <twitwicki at hannaford.com>
Subject: Re: [CCCure CISSP] CISSPstudy Digest, Vol 20 Polyinstantiation vs Polymorphism?
To: cisspstudy at cccure.org
Date: Thursday, February 11, 2010, 8:49 AM
All,
Here's a question that come out of a sample question that I've been
puzzling over:
Are Database Views an example of Polymorphism or Polyinstantiation?
The case for Polymorphism is that the different output is produced from the
same input to two different objects - the "objects" in this case being
different views of the database. This is the author's answer.
The case for Polyinstantiation is that it is frequently used to
hide/replace attributes that may not be accessed by a lower security level
such as in preventing inference attacks.
Any insight from the group would be appreciated. By the way, my exam date
is Feb 20 in Boston. I feel prepared, but there is a lot of material and
my fear is that some questions may go deeper into some areas. Wish me
luck!
Tom Witwicki, CIPP
Director, Information Security
Hannaford Bros. Co.
207-885-2073
Join me on Linkedin!
http://www.linkedin.com/in/tomwitwicki
_______________________________________________
CISSPstudy mailing list
CISSPstudy at cccure.org
http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20100211/d3ed5a3b/attachment.html>
More information about the CISSPstudy
mailing list