Exam CISSP-ISSMP topic 1 question 17 discussion

The Clark-Wilson security model emphasizes integrity and enforces that: Subjects (users) cannot access objects (data) directly. All access must be done through well-formed transactions (i.e., trusted applications or programs). This ensures that only authorized changes are made to data, maintaining data integrity. Other options: A. Biba-Clark model: This is not an official or standard model; possibly a mix-up of Biba and Clark-Wilson. B. Bell-LaPadula: Focuses on confidentiality, not integrity, and uses rules like "no read up, no write down." D. Biba model: Focuses on integrity but uses different rules such as "no write up, no read down." Clark-Wilson is the only model that requires access to objects through applications.

Bell-LaPadula The Bell-LaPadula state machine model enforces confidentiality. The Bell-LaPadula model uses mandatory access control to enforce the DoD multilevel security policy. For a subject to access information, he must have a clear need to know and meet or exceed the information’s classification level.

The Clark-Wilson model can be applied to banking systems to ensure the integrity of customer data and financial transactions. For example, each user, such as a manager, accountant, or teller, would be assigned a role with limited privileges based on their job responsibilities.

The Bell-LaPadula model is a formal model for enforcing access control policies, particularly in government and military environments. It is based on the principles of confidentiality and information flow control.

Bell-LaPadula - Correct answer

The Harrison-Ruzzo-Ullman model is a security model that dictates that subjects can only access objects through applications.