The Bell-LaPadula model is useful for access control. Can I use this model for access control in composite services?
The security level of each service is exported from WS_SecurityPolicy file.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
according to bellow mentioned paper, Bell-Lapadula Model is not compatible with Composite services:
Incompatible Access Control Models: Access control of a composition is dependent on the access control capabilities of the individual services. Where different component services use different access control models, the result could be a violation of any of the models. As a simple example, consider a travel assistance service composition where the POI service applies BellLaPadula (“no read up, no write down” for confidentiality), while the route service applies Biba (“no read down, no write up” for integrity), is liable to result in a confused system with both models partially implemented.