Which of the following security issues does the Bell-La Padula model focus on?
A.
Authorization
B.
Confidentiality
C.
Integrity
D.
Authentication
Explanation:
The Bell-La Padula model is a state machine model used for enforcing access
control in large organizations. It focuses on data confidentiality and access to classified
information, in contrast to the Biba Integrity model, which describes rules for the protection of data
integrity. In the Bell-La Padula model, the entities in an information system are divided into
subjects and objects. The Bell-La Padula model is built on the concept of a state machine with a
set of allowable states in a computer network system. The transition from one state to another
state is defined by transition functions. The model defines two mandatory access control (MAC)
rules and one discretionary access control (DAC) rule with three security properties: 1.The Simple
Security Property: A subject at a given security level may not read an object at a higher security
level (no read-up). 2.The *-property (star-property): A subject at a given security level must not
write to any object at a lower security level (no write-down). The *-property is also known as the
Confinement property. 3.The Discretionary Security Property: It uses an access matrix to specify
the discretionary access control.