Skip to main content
added 3 characters in body
Source Link
schroeder
  • 132.2k
  • 55
  • 307
  • 348

The simple way to remember the Bell-LaPadula model is: No read up, no write down.

A classification is the label and controls whether the subject (person) can read the object (document, file, etc). For this example, I will ignore compartments.

LetsLet's create four people Alice, Bob, Charlie, Diana, and Eve. Now letslet's give each one a laebllabel: Alice is Confidential, Bob is Restricted, Charlie is Confidential, Diana is Secret, Eve is Top Secret. Each person creates a document, and when they create a document the document gets the same label as the person who created it. Alice creates Document A, Bob creates Document B, Charlie creates Document C, Diana creates Document D, and Eve creates Document E.

You can now create a simple table showing what happens when someone tries to read a document.

For reading:

        | Doc A | Doc B | Doc C | Doc D | Doc E |
-------------------------------------------------
Alice   | allow | deny  | deny  | deny  | deny  |
Bob     | allow | allow | deny  | deny  | deny  | 
Charlie | allow | allow | allow | deny  | deny  | 
Diana   | allow | allow | allow | allow | deny  | 
Eve     | allow | allow | allow | allow | allow | 

The simple way to remember the Bell-LaPadula model is: No read up, no write down.

A classification is the label and controls whether the subject (person) can read the object (document, file, etc). For this example I will ignore compartments.

Lets create four people Alice, Bob, Charlie, Diana, and Eve. Now lets give each one a laebl: Alice is Confidential, Bob is Restricted, Charlie is Confidential, Diana is Secret, Eve is Top Secret. Each person creates a document, and when they create a document the document gets the same label as the person who created it. Alice creates Document A, Bob creates Document B, Charlie creates Document C, Diana creates Document D, and Eve creates Document E.

You can now create a simple table showing what happens when someone tries to read a document.

For reading:

        | Doc A | Doc B | Doc C | Doc D | Doc E |
-------------------------------------------------
Alice   | allow | deny  | deny  | deny  | deny  |
Bob     | allow | allow | deny  | deny  | deny  | 
Charlie | allow | allow | allow | deny  | deny  | 
Diana   | allow | allow | allow | allow | deny  | 
Eve     | allow | allow | allow | allow | allow | 

The simple way to remember the Bell-LaPadula model is: No read up, no write down.

A classification is the label and controls whether the subject (person) can read the object (document, file, etc). For this example, I will ignore compartments.

Let's create four people Alice, Bob, Charlie, Diana, and Eve. Now let's give each one a label: Alice is Confidential, Bob is Restricted, Charlie is Confidential, Diana is Secret, Eve is Top Secret. Each person creates a document, and when they create a document the document gets the same label as the person who created it. Alice creates Document A, Bob creates Document B, Charlie creates Document C, Diana creates Document D, and Eve creates Document E.

You can now create a simple table showing what happens when someone tries to read a document.

For reading:

        | Doc A | Doc B | Doc C | Doc D | Doc E |
-------------------------------------------------
Alice   | allow | deny  | deny  | deny  | deny  |
Bob     | allow | allow | deny  | deny  | deny  | 
Charlie | allow | allow | allow | deny  | deny  | 
Diana   | allow | allow | allow | allow | deny  | 
Eve     | allow | allow | allow | allow | allow | 
added 84 characters in body
Source Link
this.josh
  • 8.8k
  • 2
  • 32
  • 52

The simple way to remember the Bell-LaPadula model is: No read up, no write down.

A rank does not necessarily equal a classification. A classification is the label and controls whether the subject (person) can read the object (document, file, etc). First you must decide how to assign labels to the categories. Notice there are 5 categories and 4 classifications, meaning at least two categories must share a clasificationFor this example I will ignore compartments. One mapping is: Lieutenant-Restricted, Colonel-Restricted, Captain-Confidential, Lieutenant General-Secret, General-Top Secret

Now you need at leastLets create four documents for them to readpeople Alice, Bob, Charlie, Diana, and writeEve. I willNow lets give each one example and leave the rest for you.

The General holds a laebl: Alice is Confidential, Bob is Restricted, Charlie is Confidential, Diana is Secret, Eve is Top Secret clearance and writes Document A. Each person creates a document, and when they create a battle plan labeleddocument the document gets the same label as "Top Secret". When the general attempts to read Document A he is allowed accessperson who created it. When the Lieutenant General attempts to readAlice creates Document A he is denied access. When the Captain attempts to read, Bob creates Document A he is denied access. When the Colonel attempts to readB, Charlie creates Document A he is denied accessC, Diana creates Document D, and Eve creates Document E. When the Lieutenant attempts

You can now create a simple table showing what happens when someone tries to read Document A he is denied accessa document.

For reading:

        | Doc A | Doc B | Doc C | Doc D | Doc E |
-------------------------------------------------
Alice   | allow | deny  | deny  | deny  | deny  |
Bob     | allow | allow | deny  | deny  | deny  | 
Charlie | allow | allow | allow | deny  | deny  | 
Diana   | allow | allow | allow | allow | deny  | 
Eve     | allow | allow | allow | allow | allow | 

The simple way to remember the Bell-LaPadula model is: No read up, no write down.

A rank does not necessarily equal a classification. A classification is the label and controls whether the subject (person) can read the object (document, file, etc). First you must decide how to assign labels to the categories. Notice there are 5 categories and 4 classifications, meaning at least two categories must share a clasification. One mapping is: Lieutenant-Restricted, Colonel-Restricted, Captain-Confidential, Lieutenant General-Secret, General-Top Secret

Now you need at least four documents for them to read and write. I will give one example and leave the rest for you.

The General holds a Top Secret clearance and writes Document A, a battle plan labeled as "Top Secret". When the general attempts to read Document A he is allowed access. When the Lieutenant General attempts to read Document A he is denied access. When the Captain attempts to read Document A he is denied access. When the Colonel attempts to read Document A he is denied access. When the Lieutenant attempts to read Document A he is denied access.

The simple way to remember the Bell-LaPadula model is: No read up, no write down.

A classification is the label and controls whether the subject (person) can read the object (document, file, etc). For this example I will ignore compartments.

Lets create four people Alice, Bob, Charlie, Diana, and Eve. Now lets give each one a laebl: Alice is Confidential, Bob is Restricted, Charlie is Confidential, Diana is Secret, Eve is Top Secret. Each person creates a document, and when they create a document the document gets the same label as the person who created it. Alice creates Document A, Bob creates Document B, Charlie creates Document C, Diana creates Document D, and Eve creates Document E.

You can now create a simple table showing what happens when someone tries to read a document.

For reading:

        | Doc A | Doc B | Doc C | Doc D | Doc E |
-------------------------------------------------
Alice   | allow | deny  | deny  | deny  | deny  |
Bob     | allow | allow | deny  | deny  | deny  | 
Charlie | allow | allow | allow | deny  | deny  | 
Diana   | allow | allow | allow | allow | deny  | 
Eve     | allow | allow | allow | allow | allow | 
Source Link
this.josh
  • 8.8k
  • 2
  • 32
  • 52

The simple way to remember the Bell-LaPadula model is: No read up, no write down.

A rank does not necessarily equal a classification. A classification is the label and controls whether the subject (person) can read the object (document, file, etc). First you must decide how to assign labels to the categories. Notice there are 5 categories and 4 classifications, meaning at least two categories must share a clasification. One mapping is: Lieutenant-Restricted, Colonel-Restricted, Captain-Confidential, Lieutenant General-Secret, General-Top Secret

Now you need at least four documents for them to read and write. I will give one example and leave the rest for you.

The General holds a Top Secret clearance and writes Document A, a battle plan labeled as "Top Secret". When the general attempts to read Document A he is allowed access. When the Lieutenant General attempts to read Document A he is denied access. When the Captain attempts to read Document A he is denied access. When the Colonel attempts to read Document A he is denied access. When the Lieutenant attempts to read Document A he is denied access.