Security Models - BLP and Biba Model Properties
Though there is a lot to understand in security models, take a moment to compare and contrast the BLP and Biba model properties.
3 slides · 1 min read · Domain 3
Property Name
Text on this slide
Bell-LaPadula
Simple
SECURITY: subject cannot access or read an object of higher security level (No Read Up)
Star (*)
Subject can only save or write to an object at same or higher security level (No Write Down)
Strong Star
Invocation
Subject can only write to objects at SAME security level (Lateral Write Only)
Not Used
Biba
INTEGRITY: subject cannot read or access object of lower integrity level (No Read Down)
Subject cannot write to object at higher integrity level (No Write Up)
Not used
Subject cannot send service requests
Proprietary information
Text on this slide
Write
Read Read
Write
Software process not approved for proprietary information
Protecting confidentiality
Read and write permitted between equal security levels
NOTE: Arrow goes from subject to object
Write
Write
Software process not approved for proprietary information
Protecting integrity