21. Secure Design - Security Models

Multilevel Security

What is the term?

Specialized security architecture that allows a single computer system or network to process, store, and share data across multiple different classification levels simultaneously, while safely permitting users with different clearance levels to access the system.

Bell-LaPadula Model

What security model enforces confidentiality?

Simple Security Rule

What is the Bell-LaPadula rule?

No subject should be able to read information higher than their security level (no read up)

*- Property

What is the Bell-LaPadula rule?

A subject at one security level should not be able to write information at a lower security level (no write down). It used in formal access control models to prevent the unauthorized flow of information.

Biba Model

What security model enforces integrity?

Simple Integrity Property

What is the Biba rule?

A subject should not be able to read at a security level lower than their clearance.

*-Integrity Property

What is the Biba rule?

No write up, a subject should not be able to write to a higher security level than their clearance

Reading

Any rule containing the word "Simple" handles doing what with data?

Writing

Any security model rule containing the "$\star$" (Star) symbol handles doing what with data?