Extend the example of deriving required logging information to the full Bell-LaPadula Model with both security levels and compartments.
I hope this answer would be satisfactory. If any doubt regarding it arises feel free to contact me in the comment section below. Hit "Upvote" button if the answer is usefull.
<=======================================================================================>
Bell-LaPadula model combines Mandatory and Discretionary Access Controls. Under this model it takes a hierarchical approach to controlling access to resources and making the user the access provider of his own data.
Let A and B be the labels of security compartments, where A is senior to B. Then under the Bell-LaPadula model, a subject with label B cannot read an entity with label A, but A can access the data of B.
Get Answers For Free
Most questions answered within 1 hours.