Skip to main content

Questions tagged [bell-lapadula]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
43 views

Bell-Lapadula model "Execute" permission

In all BLP model descriptions I've seen, the permissions set is defined to be {Read, Write, Append, Execute}. None of the three BLP security properties The Simple Security Property states that a ...
hegash's user avatar
  • 99
2 votes
1 answer
325 views

Can a subject in Bell-LaPadula model write to other files with different compartments but same classification?

my question is based on the post made Toaster which never got a reply (Bell-LaPadula Model Compartments). In BLP If a subject has a classification level General and compartment Land (General, {Land}), ...
jefazo92's user avatar
2 votes
1 answer
558 views

Bell-LaPadula Model Compartments

I'm trying to figure out Bell-LaPadula model and am having a hard time with compartments. If Subject 1 is (SECRET, {C}) and they want to read Document 1 which is (UNCLASSIFIED, {A, B, C}), would they ...
Toaster's user avatar
  • 21
1 vote
1 answer
171 views

Why is a system composed of two Bell-LaPadula-secure systems not necessarily Bell-LaPadula-secure?

In my lecture notes, it says that a system composed of two Bell-LaPadula-secure systems is not necessarily Bell-LaPadula-secure? Is there an example that demonstrates this concept?
ptk's user avatar
  • 111
1 vote
0 answers
450 views

Why Bell-LaPadula simple and star properties are named that way? [closed]

In Bell LaPadula model, there are 2 properties: * (star) properties: No write down Simple properties: No read up I can understand no write down and no read up, which is very descriptive. However ...
Ng Sek Long's user avatar
0 votes
1 answer
134 views

How does replacing/overwriting data work in Bell-LaPadula?

We don't have write-down in Bell-LaPadula (star property) however does this apply only to appending or does it also apply to overwriting data?
user196618's user avatar
1 vote
1 answer
212 views

Bell LaPadula with Empty Set

I've been answering some questions about the Bell LaPadula model in my book, but I don't seem to get the correct answer on b). Below I've tried to explain my thought process on how I've attemped to ...
Jasin Ali's user avatar
2 votes
1 answer
273 views

Does the subject HAVE to dominate the object in order to access the object?

Lets say Paul, is cleared for (TOP SECRET, {A,C}) where top secret is his clearance and A & C privledges. He wants to access a Document classified (Secret,{B,C}).. Top secret trumps Secret but in ...
Ryan's user avatar
  • 35
3 votes
1 answer
3k views

Are Bell-LaPadula and Biba models used in real big software security design?

I am currently studying both Bell-LaPadula and Biba models, I found this models too theoretical as I see the examples and I can see that there are used for designing particular services that needs ...
Mauricio Pastorini's user avatar
0 votes
1 answer
258 views

Implementation of security policy using BLP

I'm studying for an exam that covers BLP (Bell-Lapadula) and I was wondering if the following could be represented using this policy. All the examples I've found online are of a simple hierarchical ...
user979616's user avatar
4 votes
2 answers
785 views

Bell-LaPadula no read no write

I'm reading about the Bell-LaPadula model. I understand the Simple Security Property and the Star Property, and I see that the model also incorporates a Discretional Security Property. My question is: ...
patmuir's user avatar
  • 41
2 votes
1 answer
402 views

mandatory access control for database security

For mandatory access control, the following rules, due to Bell and La Padula, are imposed: User i can retrieve object j only if the clearance level of i is greater than or equal to the classification ...
Ju Ju's user avatar
  • 39
0 votes
1 answer
338 views

Bell-LaPadula model and composite services

The Bell-LaPadula model is useful for access control. Can I use this model for access control in composite services? The security level of each service is exported from WS_SecurityPolicy file.
M Barazande's user avatar
3 votes
2 answers
1k views

Access control of Linux and Bell LaPadula Model

I know that access control is a very important think when we want to protect our files and in security in general. Does anyone know what access control system is used by linux? In addition I just ...
John Smith's user avatar
5 votes
2 answers
13k views

Biba and Bell LaPadula together [duplicate]

Can Biba model always be combined with Bell-LaPadula model? What are the issues that arise?Would there be conflicts?How would information flow be affected?
zigglytones's user avatar
4 votes
2 answers
3k views

How can the low-water mark property apply to Bell-LaPadula?

I am taking a computer security class, and have a homework problem which has the following setup: Now assume a dynamic version of the Bell-La Padula Confidentiality model that incorporates a ...
Cat's user avatar
  • 141
2 votes
1 answer
2k views

Putting the Biba-LaPadula Mandatory Access Control Methods to Practise?

Text books on database systems always refer to the two Mandatory Access Control models; Biba for the Integrity objective and Bell-LaPadula for the Secrecy or Confidentiality objective. Text books ...
Jonathan's user avatar
  • 155
3 votes
1 answer
3k views

Covert Channels Exploit and the Bell-LaPadula MAC Model

I'm wrapping my head around Mandatory Access Control (MAC) and the well-known Bell-LaPadula model. One limitation that is mentioned with this model is covert channel exploitation. The one example I ...
Jonathan's user avatar
  • 155
8 votes
3 answers
12k views

Bell-LaPadula imlementation example

I'm currently studying the Bell-LaPadula model and i need to do an implementation as an example. I understand how the model works, but I have difficulties implementing it in a programming language (...
user1019710's user avatar
5 votes
1 answer
3k views

BLP Lattice-structured system from Access Control Matrix

I've been reading a Computer Security book by William Stallings and have found this example of an Access Control Matrix: Any example will do. I just thought I'd screenshot this off CourseSmart. How ...
John's user avatar
  • 51
9 votes
3 answers
8k views

Why does the ★-property rule of the Bell-LaPadula Model allow information to be stored in objects with HIGHER sensitivity labels?

I'm self-studying for the CISSP exam and am having difficulty wrapping my mind around the practical side of the ★-property rule in the Bell-LaPadula Model. I understand the mechanics of it and that ...
Mike B's user avatar
  • 3,458
9 votes
2 answers
6k views

Bell-LaPadula and Biba Together

Theoretically, could the Bell-Lapaluda security model be implemented with the Biba integrity model in an Operating System? Or do are they mutually exclusive? [Edit: Follow up from this question on ...
Rose Kunkel's user avatar