Question

^{Someone states that the key for Biba model is:}

^{“No reads down and no writes up”, is this correct? Justify.}

Answer 1

BIBA model:

The security engineering model is named after Kenneth J. Biba with confidentiality as primary concern.

It has two primary rules: the Simple Integrity Axiom and the * Integrity Axiom.

1. Simple Integrity Axiom is a subject at a specific classification level cannot read data at a lower classification which is (No read down).
2. * Integrity Axiom is a subject at a specific classification level cannot write to data at a higher classification (No write up).

Hence we can summarize that BIBA model to be No read down and no write up.