# An Evaluation of the Security of Bare Machine Computing (BMC) Systems against Cybersecurity Attacks
## 3 Bare Machine Computing (BMC) Systems
### Properties of the BMC Paradigm
#### 3.5.1 BMC System Guidelines  
1. System Approach: It is a revolutionary approach that was invented to address obsolescence and security problems. It makes applications independent from the execution environment, and all computing devices are bare.
2. Open/Closed System: It is a closed system. Injecting an attacker's code is not possible. Open source must not be confused with open systems. The BMC is a closed system. The computing box is bare, and the application running in the bare box is not accessible to hackers. In case hackers create a similar system, they can only hack their own system, not others. If we make an open system, security vulnerabilities are easy to fix, but hackers and developers are at the same knowledge level.
3. Global Focus: It has a local focus. It is architected, designed, and implemented to avoid global users.
4. User USBs: There are dual USBs (the first for booting and the second for an application suite). Both USBs must be physically secured.
5. Equal Access: All bare users have equal access.
6. Education and Knowledge: Restricted to authorized bare users.
7. Layers: There are no layers at any level.
8. Bare Internet: To make BMC viable, a bare Internet concept [43] is introduced. In a bare Internet, all intermediate nodes, such as routers and gateways, must be bare, and they must be physically secured. At present, a bare Internet is overlaid on the existing Internet.
9. Heterogeneity: No heterogeneity is allowed in programming languages, hardware, and software. The security of systems and applications is more controllable.
10. User/Developer Convenience: User convenience takes lower priority over other design issues in defining system guidelines. For example, a system administrator must physically distribute user accounts to guarantee the authentication of users. This is not convenient, but all other electronic means may not be secure. The BMC systems are not global, and the users are limited within a given domain-specific application. These systems are designed for secure domains, not for a global world. Non-bare users can use conventional systems if BMC systems do not fit their needs. BMC systems provide an alternative approach to current computing systems.
11. Training: All authorized bare users must have consistent training and education.
12. Software Installation: Online installation is not allowed. There is nothing to install in a bare machine. The user carries secure USBs. These USBs are distributed to authorized bare users by physical means.
13. Wi-Fi: Wi-Fi is currently not supported due to its security issues.
14. Script and Batch Files: These are not allowed.
15. Attachments and Links: Attachments and links are not allowed in emails.
16. Social Media Platforms: There is no support for social media applications. Social media can use the conventional Internet, which is isolated from a bare Internet. This approach will reduce the number of users on a bare Internet.
17. Advertisements: Advertisements are not allowed. All domain-specific applications and their users are properly authorized and tracked on a bare Internet.
18. Unsolicited Websites: Only access to authenticated bare websites is allowed.
19. Automated Tools: Automated tools are designed to work with only bare computing devices and applications. Their use is restricted to bare users only.
20. Cookies: No cookies are allowed.