SSCP · Question #189
Which of the following models does NOT include data integrity or conflict of interest?
The correct answer is C. Bell-LaPadula. Bell LaPadula model (Bell 1975): The granularity of objects and subjects is not predefined, but the model prescribes simple access rights. Based on simple access restrictions the Bell LaPadula model enforces a discretionary access control policy enhanced with mandatory rules…
Question
Which of the following models does NOT include data integrity or conflict of interest?
Options
- ABiba
- BClark-Wilson
- CBell-LaPadula
- DBrewer-Nash
How the community answered
(63 responses)- A3% (2)
- B2% (1)
- C94% (59)
- D2% (1)
Explanation
Bell LaPadula model (Bell 1975): The granularity of objects and subjects is not predefined, but the model prescribes simple access rights. Based on simple access restrictions the Bell LaPadula model enforces a discretionary access control policy enhanced with mandatory rules. Applications with rigid confidentiality requirements and without strong integrity requirements may properly be modeled. These simple rights combined with the mandatory rules of the policy considerably restrict the spectrum of applications which can be appropriately modeled.
Topics
Community Discussion
No community discussion yet for this question.