SSCP · Question #123
What does the simple integrity axiom mean in the Biba model?
The correct answer is B. No read down. The Biba model's simple integrity axiom states that a subject cannot read data from an object at a lower integrity level - 'no read down.' The rationale is that reading low-integrity (potentially corrupt or untrustworthy) data could compromise the integrity of a…
Question
Options
- ANo write down
- BNo read down
- CNo read up
- DNo write up
How the community answered
(14 responses)- B86% (12)
- C7% (1)
- D7% (1)
Explanation
The Biba model's simple integrity axiom states that a subject cannot read data from an object at a lower integrity level - 'no read down.' The rationale is that reading low-integrity (potentially corrupt or untrustworthy) data could compromise the integrity of a higher-integrity subject. This complements the *-integrity axiom ('no write up'). Together they ensure that integrity levels are preserved: high-integrity processes are shielded from both reading untrustworthy input and writing to high-integrity objects from a compromised state.
Topics
Community Discussion
No community discussion yet for this question.