In which of the following security models is the subject's clearance compared to the object's classification such that specific rules can be applied to control how the subject-to-object interactions…

Question

Options

• ABell-LaPadula model
• BBiba model
• CAccess Matrix model
• DTake-Grant model

• A
  91% (43)
• B
  2% (1)
• C
  6% (3)

Explanation

Bell-LaPadula is the model specifically designed around comparing a subject's clearance level to an object's classification level, then enforcing rules like "no read up" (Simple Security Property) and "no write down" (Star Property) to control information flow - this is exactly the mechanism described in the question.

Biba is also a lattice-based model, but it focuses on integrity rather than confidentiality, using rules like "no read down" and "no write up" - it compares levels but for a different purpose, making it a tempting but incorrect choice.

Access Matrix defines permissions through a table mapping subjects to objects with allowed operations (read, write, execute), but it does not use clearance/classification levels - it's about explicit permission grants, not hierarchical labels.

Take-Grant models how rights can be transferred between subjects and objects using graph-based rules (take, grant, create, remove), with no concept of clearance or classification levels at all.

Memory tip: Think "Bell = Badges (clearance), Biba = Behavior (integrity)" - Bell-LaPadula is the original military confidentiality model where government-style clearances and classifications are compared, while Biba is its integrity-focused mirror image.

No community discussion yet for this question.