Muftasoft TM

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== An overview of some common security models used in information security ======


1. **Bell-LaPadula Model:**
   - The Bell-LaPadula (BLP) model is a formal model for enforcing access control policies, particularly in government and military settings.
   - It is based on the principles of confidentiality and integrity.
   - The model defines two security properties: the Simple Security Property (no read up) and the *-Property (no write down).
   - BLP enforces the principle of "need-to-know," where users can only access information at or below their security clearance level.

2. **Biba Model:**
   - The Biba model focuses on data integrity and is designed to prevent data corruption and unauthorized modification.
   - It is based on the principle of integrity and enforces two main rules: the Simple Integrity Property (no read down) and the *-Property (no write up).
   - Biba prevents users from accessing data at a lower integrity level than their own, thereby preventing the spread of corrupted or unauthorized data.

3. **Clark-Wilson Model:**
   - The Clark-Wilson model emphasizes integrity and is commonly used in commercial environments.
   - It focuses on ensuring that data is protected from unauthorized modification or corruption.
   - The model uses well-formed transactions and separation of duties to enforce integrity constraints.
   - It requires the use of an access control mechanism called a "transformation procedure" to enforce integrity constraints and maintain data consistency.

These security models provide formal frameworks for enforcing access control policies, protecting confidentiality, ensuring data integrity, and preventing unauthorized access and modification. They are essential tools for designing secure systems and defining security policies in various environments, ranging from government and military to commercial and organizational settings.