Please enable JavaScript.

Coggle requires JavaScript to display documents.

Security Engineering (Security Models (Models (Bell-LaPadula Model (Two…

- - - - State of a machine is captured to verify the security of a system
    - - developed for US Department of Defense
      - Two Access Rules
        
        No Read Up
        
        No Write Down
      - Two Object Label Rules
    - - controls for complex env
    - - developed after Bell-LaPadula
      - focus on maintaining the integrity of objects
      - No Read Down, No Write Up
    - - two factors
        
        Classification
        
        Need to know
    - - Designed to avoid conflicts of interest
    - - Real-world integrity model
    - - Six frameworks for providing information security, asking what, how, where, who, when, and why
    - - three parts: objects, subjects and rules
      - eight rules: transfer access, grant access, delete access, read object, create object, destroy object, create subject, destroy subject
    - - Operating system level computer security model
    - - govern the interactions between subjects and objects