SSCP · Question #124
What is the Biba security model concerned with?
The correct answer is D. Integrity. Biba is a formal security model designed specifically to protect data integrity - it prevents unauthorized modification of data by enforcing rules like "no write up, no read down" (subjects cannot write to higher integrity levels or read from lower ones), ensuring data flows…
Question
Options
- AConfidentiality
- BReliability
- CAvailability
- DIntegrity
How the community answered
(29 responses)- A3% (1)
- B7% (2)
- C3% (1)
- D86% (25)
Explanation
Biba is a formal security model designed specifically to protect data integrity - it prevents unauthorized modification of data by enforcing rules like "no write up, no read down" (subjects cannot write to higher integrity levels or read from lower ones), ensuring data flows only in ways that preserve its trustworthiness.
- A (Confidentiality) is wrong because that's the domain of the Bell-LaPadula model, which uses "no read up, no write down" to prevent unauthorized disclosure.
- B (Reliability) is a related concept but not a formal security model property - it's more of a systems/infrastructure concern, not what Biba addresses.
- C (Availability) is one of the CIA triad pillars but is associated with different controls (redundancy, DoS prevention), not Biba's rule set.
Memory tip: Think Biba = Bad data in, bad data out - it's all about keeping data clean and unmodified. Alternatively, pair the two classic models: Bell-LaPadula = Confidentiality, Biba = Integrity (alphabetical order: B comes before L, just as C comes before I).
Topics
Community Discussion
No community discussion yet for this question.