Modeling Multics in the Bell-LaPadula Security Model

 

Created: March 2, 2004

Last Updated: March 2, 2004

 

Version 0.1

Author: Ping Chen

 


 

Level of Difficulty: Moderate

 

Completion Time: 2 weeks

 

Programming involved: Yes

 

Objectives

 

The objective of this project is to analyze Bell-La Padula model.

 

Project 

For each of the following, give code for the rule and a proof that your rule is secure.

Remember that for discretionary access control, to alter a subjects permission on an object requires having write on the parent of that object, except for the funny behavior near root. You'll have to think about what this means for create-object, for the others it should be straightforward or irrelevant.

  1. get-execute
  2. release-write
  3. rescind-append

Resources

 

Book: Security in Computing - Charles P. Pfleeger

 

Glossary