Questions tagged [bell-lapadula]
The bell-lapadula tag has no usage guidance.
22
questions
2
votes
1
answer
151
views
Can a subject in Bell-LaPadula model write to other files with different compartments but same classification?
my question is based on the post made Toaster which never got a reply (Bell-LaPadula Model Compartments). In BLP If a subject has a classification level General and compartment Land (General, {Land}), ...
- 31
2
votes
1
answer
306
views
Bell-LaPadula Model Compartments
I'm trying to figure out Bell-LaPadula model and am having a hard time with compartments.
If Subject 1 is (SECRET, {C}) and they want to read Document 1 which is (UNCLASSIFIED, {A, B, C}), would they ...
- 21
0
votes
1
answer
118
views
Bell-LaPadula looking for real code example
I cannot find a single code example of Bell-LaPadula security model.
There are pleanty of questions but none got concluded.
Does anyone have a clear example in any language that demonstrate it?
- 195
1
vote
1
answer
137
views
Why is a system composed of two Bell-LaPadula-secure systems not necessarily Bell-LaPadula-secure?
In my lecture notes, it says that a system composed of two Bell-LaPadula-secure systems is not necessarily Bell-LaPadula-secure? Is there an example that demonstrates this concept?
- 111
1
vote
0
answers
287
views
Why Bell-LaPadula simple and star properties are named that way? [closed]
In Bell LaPadula model, there are 2 properties:
* (star) properties: No write down
Simple properties: No read up
I can understand no write down and no read up, which is very descriptive.
However ...
- 253
0
votes
1
answer
107
views
How does replacing/overwriting data work in Bell-LaPadula?
We don't have write-down in Bell-LaPadula (star property) however does this apply only to appending or does it also apply to overwriting data?
1
vote
1
answer
173
views
Bell LaPadula with Empty Set
I've been answering some questions about the Bell LaPadula model in my book, but I don't seem to get the correct answer on b). Below I've tried to explain my thought process on how I've attemped to ...
- 11
2
votes
1
answer
229
views
Does the subject HAVE to dominate the object in order to access the object?
Lets say Paul, is cleared for (TOP SECRET, {A,C}) where top secret is his clearance and A & C privledges. He wants to access a Document classified (Secret,{B,C})..
Top secret trumps Secret but in ...
- 35
3
votes
1
answer
2k
views
Are Bell-LaPadula and Biba models used in real big software security design?
I am currently studying both Bell-LaPadula and Biba models, I found this models too theoretical as I see the examples and I can see that there are used for designing particular services that needs ...
0
votes
1
answer
223
views
Implementation of security policy using BLP
I'm studying for an exam that covers BLP (Bell-Lapadula) and I was wondering if the following could be represented using this policy. All the examples I've found online are of a simple hierarchical ...
4
votes
2
answers
695
views
Bell-LaPadula no read no write
I'm reading about the Bell-LaPadula model. I understand the Simple Security Property and the Star Property, and I see that the model also incorporates a Discretional Security Property. My question is:
...
- 41
2
votes
1
answer
346
views
mandatory access control for database security
For mandatory access control, the following rules, due to Bell and La Padula, are imposed:
User i can retrieve object j only if the clearance level of i is greater than or equal to the classification ...
- 39
0
votes
1
answer
305
views
Bell-LaPadula model and composite services
The Bell-LaPadula model is useful for access control. Can I use this model for access control in composite services?
The security level of each service is exported from WS_SecurityPolicy file.
3
votes
2
answers
1k
views
Access control of Linux and Bell LaPadula Model
I know that access control is a very important think when we want to protect our files and in security in general. Does anyone know what access control system is used by linux?
In addition I just ...
- 143
5
votes
2
answers
12k
views
Biba and Bell LaPadula together [duplicate]
Can Biba model always be combined with Bell-LaPadula model? What are the issues that arise?Would there be conflicts?How would information flow be affected?
- 153
4
votes
2
answers
2k
views
How can the low-water mark property apply to Bell-LaPadula?
I am taking a computer security class, and have a homework problem which has the following setup:
Now assume a dynamic version of the Bell-La Padula Confidentiality
model that incorporates a ...
- 141
2
votes
1
answer
2k
views
Putting the Biba-LaPadula Mandatory Access Control Methods to Practise?
Text books on database systems always refer to the two Mandatory Access Control models; Biba for the Integrity objective and Bell-LaPadula for the Secrecy or Confidentiality objective.
Text books ...
- 155
3
votes
1
answer
3k
views
Covert Channels Exploit and the Bell-LaPadula MAC Model
I'm wrapping my head around Mandatory Access Control (MAC) and the well-known Bell-LaPadula model. One limitation that is mentioned with this model is covert channel exploitation. The one example I ...
- 155
8
votes
3
answers
11k
views
Bell-LaPadula imlementation example
I'm currently studying the Bell-LaPadula model and i need to do an implementation as an example.
I understand how the model works, but I have difficulties implementing it in a programming language (...
- 81
5
votes
1
answer
3k
views
BLP Lattice-structured system from Access Control Matrix
I've been reading a Computer Security book by William Stallings and have found this example of an Access Control Matrix:
Any example will do. I just thought I'd screenshot this off CourseSmart.
How ...
- 51
9
votes
3
answers
7k
views
Why does the ★-property rule of the Bell-LaPadula Model allow information to be stored in objects with HIGHER sensitivity labels?
I'm self-studying for the CISSP exam and am having difficulty wrapping my mind around the practical side of the ★-property rule in the Bell-LaPadula Model. I understand the mechanics of it and that ...
- 3,398
9
votes
2
answers
5k
views
Bell-LaPadula and Biba Together
Theoretically, could the Bell-Lapaluda security model be implemented with the Biba integrity model in an Operating System? Or do are they mutually exclusive?
[Edit: Follow up from this question on ...
- 193