Questions tagged [bell-lapadula]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
71 views

Bell-LaPadula Model Compartments

I'm trying to figure out Bell-LaPadula model and am having a hard time with compartments. If Subject 1 is (SECRET, {C}) and they want to read Document 1 which is (UNCLASSIFIED, {A, B, C}), would they ...
0
votes
0answers
57 views

Bell-LaPadula looking for real code example

I cannot find a single code example of Bell-LaPadula security model. There are pleanty of questions but none got concluded. Does anyone have a clear example in any language that demonstrate it?
1
vote
1answer
88 views

Why is a system composed of two Bell-LaPadula-secure systems not necessarily Bell-LaPadula-secure?

In my lecture notes, it says that a system composed of two Bell-LaPadula-secure systems is not necessarily Bell-LaPadula-secure? Is there an example that demonstrates this concept?
1
vote
0answers
182 views

Why Bell-LaPadula simple and star properties are named that way? [closed]

In Bell LaPadula model, there are 2 properties: * (star) properties: No write down Simple properties: No read up I can understand no write down and no read up, which is very descriptive. However ...
0
votes
1answer
78 views

How does replacing/overwriting data work in Bell-LaPadula?

We don't have write-down in Bell-LaPadula (star property) however does this apply only to appending or does it also apply to overwriting data?
1
vote
1answer
116 views

Bell LaPadula with Empty Set

I've been answering some questions about the Bell LaPadula model in my book, but I don't seem to get the correct answer on b). Below I've tried to explain my thought process on how I've attemped to ...
2
votes
1answer
189 views

Does the subject HAVE to dominate the object in order to access the object?

Lets say Paul, is cleared for (TOP SECRET, {A,C}) where top secret is his clearance and A & C privledges. He wants to access a Document classified (Secret,{B,C}).. Top secret trumps Secret but in ...
3
votes
1answer
2k views

Are Bell-LaPadula and Biba models used in real big software security design?

I am currently studying both Bell-LaPadula and Biba models, I found this models too theoretical as I see the examples and I can see that there are used for designing particular services that needs ...
0
votes
1answer
177 views

Implementation of security policy using BLP

I'm studying for an exam that covers BLP (Bell-Lapadula) and I was wondering if the following could be represented using this policy. All the examples I've found online are of a simple hierarchical ...
4
votes
2answers
582 views

Bell-LaPadula no read no write

I'm reading about the Bell-LaPadula model. I understand the Simple Security Property and the Star Property, and I see that the model also incorporates a Discretional Security Property. My question is: ...
2
votes
1answer
289 views

mandatory access control for database security

For mandatory access control, the following rules, due to Bell and La Padula, are imposed: User i can retrieve object j only if the clearance level of i is greater than or equal to the classification ...
0
votes
1answer
250 views

Bell-LaPadula model and composite services

The Bell-LaPadula model is useful for access control. Can I use this model for access control in composite services? The security level of each service is exported from WS_SecurityPolicy file.
3
votes
2answers
1k views

Access control of Linux and Bell LaPadula Model

I know that access control is a very important think when we want to protect our files and in security in general. Does anyone know what access control system is used by linux? In addition I just ...
5
votes
2answers
11k views

Biba and Bell LaPadula together [duplicate]

Can Biba model always be combined with Bell-LaPadula model? What are the issues that arise?Would there be conflicts?How would information flow be affected?
4
votes
2answers
2k views

How can the low-water mark property apply to Bell-LaPadula?

I am taking a computer security class, and have a homework problem which has the following setup: Now assume a dynamic version of the Bell-La Padula Confidentiality model that incorporates a ...
2
votes
1answer
2k views

Putting the Biba-LaPadula Mandatory Access Control Methods to Practise?

Text books on database systems always refer to the two Mandatory Access Control models; Biba for the Integrity objective and Bell-LaPadula for the Secrecy or Confidentiality objective. Text books ...
3
votes
1answer
3k views

Covert Channels Exploit and the Bell-LaPadula MAC Model

I'm wrapping my head around Mandatory Access Control (MAC) and the well-known Bell-LaPadula model. One limitation that is mentioned with this model is covert channel exploitation. The one example I ...
8
votes
3answers
9k views

Bell-LaPadula imlementation example

I'm currently studying the Bell-LaPadula model and i need to do an implementation as an example. I understand how the model works, but I have difficulties implementing it in a programming language (...
4
votes
1answer
3k views

BLP Lattice-structured system from Access Control Matrix

I've been reading a Computer Security book by William Stallings and have found this example of an Access Control Matrix: Any example will do. I just thought I'd screenshot this off CourseSmart. How ...
9
votes
3answers
7k views

Why does the ★-property rule of the Bell-LaPadula Model allow information to be stored in objects with HIGHER sensitivity labels?

I'm self-studying for the CISSP exam and am having difficulty wrapping my mind around the practical side of the ★-property rule in the Bell-LaPadula Model. I understand the mechanics of it and that ...
8
votes
2answers
5k views

Bell-LaPadula and Biba Together

Theoretically, could the Bell-Lapaluda security model be implemented with the Biba integrity model in an Operating System? Or do are they mutually exclusive? [Edit: Follow up from this question on ...