Additional Access Control Models

Question 1

Bell-LaPadula Confidentiality Model

Answer 1

“no read up, no write down”

Question 2

• Biba Integrity Model

Answer 2

“no write up, no read down”

Question 3

Clark-Wilson Integrity Model

Answer 3

No changes by unauthorised subjects

• No unauthorised changes by authorised subjects
• Maintenance of internal and external consistency
• Internal consistency: system does what is expected to do
  without exception
• External consistency: data in the system is consistent with
  similar data in outside world

Question 4

Graham-Denning Access Control Model

Answer 4

objects, subjects and rights

Question 5

Brewer-Nash Model

Answer 5

subjects can access only one of two
conflicting sets of data, prevents conflicts of interest

Question 6

Role Based Access Control

Answer 6

Newer than DAC and MAC
* Centrally administered set of controls
* Assigning permissions based upon roles
* Users who perform a similar function are grouped together
* For example, Moodle access for students and lecturers
* Useful model for companies with high employee turnovers