Hi, all:

my question is, in these two models, does the people can read and write the SAME security level files?


Thank you!

Report this post to a moderator

Hello,

My understanding is this, the Bell-LaPadula focuses on confidentiality. It is known as an information flow security model also, which means that information does not flow to an object of lesser or non-comparable classification.

The Biba model is latticed-based and uses the less than or equal to relation. Focuses on integrity. A subject cannot write data to an object at a higher integrity level
“no write up”. A subject cannot read data from an object at a lower integrity level
“no read down”.

SB4

__________________
SB4
MCSE(W23K,W2K,NT)
MCSE Security
A+,N+, CISSP

Report this post to a moderator

quote:

---

Originally posted by SB4
Hello,

My understanding is...

The Biba model is latticed-based and uses the less than or equal to relation...

SB4

---

Report this post to a moderator

The simple concept is:

Bell-LaPadula - addresses confidentiality
Two main properties:
1) Simple Security Property:
Cannot read information from an object with a higher sensitivity label than yours
2) Star Property:
Cannot write information to an object with a lower sensitivity label than yours

Biba (aka Bell-LaPadula Upside Down) - addresses integrity
Two main properties:
1) Simple Integrity Property:
Cannot read information from an object with a lower sensitivity label than yours
2) Star Integrity Property:
Cannot write information to an object with a higher sensitivity label than yours


Yes, there are other properties, but this should answer your question.

__________________
CISSP, ISSAP, GCFW Gold, CEH, MCSA 2003, MCP, CSA/HP-UX, LPIC-2, LPIC-1, PGP CPE, RSA/CSE SecurID, Veritas DPA Linux+, Security+.
This site sucks. With the amount of spam and lack of moderation that examnotes.net has, it's better to check out www.techexams.net/forums, www.certcities.com and www.security-forums.com.

Report this post to a moderator

quote:

---

Originally posted by t_bind
The simple concept is:

Bell-LaPadula - addresses confidentiality
Two main properties:
1) Simple Security Property:
Cannot read information from an object with a higher sensitivity label than yours
2) Star Property:
Cannot write information to an object with a lower sensitivity label than yours

Biba (aka Bell-LaPadula Upside Down) - addresses integrity
Two main properties:
1) Simple Integrity Property:
Cannot read information from an object with a lower sensitivity label than yours
2) Star Integrity Property:
Cannot write information to an object with a higher sensitivity label than yours


Yes, there are other properties, but this should answer your question.

---

Report this post to a moderator