Showing posts with label Key Points. Show all posts
Showing posts with label Key Points. Show all posts

Saturday, January 11, 2014

UNIT II
Searching Techniques
Introduction
We have outlined the different types of search strategies. In the earlier chapter we have
looked at different blind search strategies. Uninformed search methods lack problemspecific
knowledge. Such methods are prohibitively inefficient in many cases. Using
problem-specific knowledge can dramatically improve the search speed. In this chapter
we will study some informed search algorithms that use problem specific heuristics.
Review of different Search Strategies
1. Blind Search
a) Depth first search
b) Breadth first search
c) Iterative deepening search
d) Bidirectional search

2. Informed Search

Informed Search and Exploration
Graph Search Algorithm
We begin by outlining the general graph search algorithm below.
Graph search algorithm
Review of Uniform-Cost Search (UCS)
We will now review a variation of breadth first search we considered before, namely
Uniform cost search.
To review, in uniform cost search we enqueue nodes by path cost.
Let g(n) = cost of the path from the start node to the current node n.
Version 1 CSE IIT, Kharagpur
The algorithm sorts nodes by increasing value of g, and expands the lowest cost node of
the fringe.
Properties of Uniform Cost Search
• Complete
• Optimal/Admissible
• Exponential time and space complexity, O(bd)
The UCS algorithm uses the value of g(n) to select the order of node expansion. We will
now introduce informed search or heuristic search that uses problem specific heuristic

information. The heuristic will be used to select the order of node expansion.

Comparison With Requirements

•             Users can’t certify TPs, so CR5 and ER4 enforce this

•             Procedural, so model doesn’t directly cover it; but special process corresponds to using TP

•           No technical controls can prevent programmer from developing program on production system; usual control is to delete software tools

•             TP does the installation, trusted personnel do certification

   CR4 provides logging; ER3 authenticates trusted personnel doing installation; CR5, ER4 control installation procedure

•           New program UDI before certification, CDI (and TP) after

•             Log is CDI, so appropriate TP can provide managers, auditors access

•           Access to state handled similarly

Comparison to Biba

•      Biba

–   No notion of certification rules; trusted subjects ensure actions obey rules

–   Untrusted data examined before being made trusted

•      Clark-Wilson

–   Explicit requirements that actions must meet

–   Trusted entity must certify method to upgrade untrusted data (and not certify the data itself)

Key Points

•      Integrity policies deal with trust

–   As trust is hard to quantify, these policies are hard to evaluate completely

–   Look for assumptions and trusted users to find possible weak points in their implementation

•      Biba based on multilevel integrity


•      Clark-Wilson focuses on separation of duty and transactions