Bell-LaPadula – Confidentiality model
Only deals with confidentiality does not deal with integrity or availability
(NO “I” or “EYE” is CONFIDENTIAL – can’t write to my boss’ level, subordinates who are down can’t read my level)
Based on Government Classification – Unclassified, Sensitive But Unclassified (SBU), Confidential, Secret, Top Secret
A Trusted Subject can violate the *property
Bell-LaPadula Security State Defined by three properties:
Simple Security Property (ss Property) – no reading from lower subject to higher object (No Read Up) I don’t see above my class
The * (star) security Property – No writing from higher subject to lower object (No write Down) I don’t author to a lower level of security
Trusted Subject can violate the star property but not its intent
Strong * property – no reading or writing to another level
Discretionary Security Property – Uses Access Matrix to specify discretionary access control
Remember the hyphen “-” is separation of duties
Writing and Reading Orders - Confidentiality
No read up – it's confidential so I can’t see a command sent to my boss
No write down – I only need to read what my boss sends me. A lower rank can’t see my orders. I can’t change the classification to allow them that access. We are segregated.
Biba Integrity Model defined by three goals
Whether you're preparing for Cybersecurity certification, working with government standards, or simply starting your career in compliance, these are the NIST Federal Information Processing Standards (FIPS), Special Publication (SP), and Interagency Report (IR) topics