Which of the following security issues does the Bell-La Padula model focus on?
A.
Authentication
B.
Confidentiality
C.
Integrity
D.
Authorization
Explanation:
The Bell-La Padula model is a state machine model used for enforcing access control in large
organizations. It focuses on data confidentiality and access to classified information, in contrast to
the Biba Integrity model, which describes rules for the protection of data integrity. In the Bell-La
Padula model, the entities in an information system are divided into subjects and objects.
The Bell-La Padula model is built on the concept of a state machine with a set of allowable states in a
computer network system. The transition from one state to another state is defined by transition
functions. The model defines two mandatory access control (MAC) rules and one discretionary
access control (DAC) rule with three security properties.
1.The Simple Security Property. A subject at a given security level may not read an object at a higher
security level (no read-up).2.The *-property (star-property). A subject at a given security level must not write to any object at a
lower security level (no writedown). The *-property is also known as the Confinement property.
3.The Discretionary Security Property. It uses an access matrix to specify the discretionary access
control.