Which of the following security models deal only with integrity? Each correct answer represents a complete solution.
Choose two.
Click on the arrows to vote for the correct answer
A. B. C. D.BD.
The security models that deal only with integrity are the Biba and Biba-Wilson models.
Biba Model: The Biba model focuses solely on integrity and is designed to prevent unauthorized modification of data. The Biba model follows the principle of "no write up, no read down," which means that data can only be written by a higher level of integrity and read by a lower level of integrity. This principle ensures that data cannot be modified by unauthorized individuals. The Biba model is particularly useful in situations where the confidentiality of data is not a significant concern, but data integrity is crucial.
Biba-Wilson Model: The Biba-Wilson model is an extension of the Biba model, and it also deals only with integrity. It provides a greater level of control over data by allowing both read and write access to only those who have appropriate access rights. The Biba-Wilson model combines the "no write up, no read down" principle of the Biba model with the "confinement" principle of the Clark-Wilson model, which restricts access to data based on the user's role and the type of activity they are performing.
Clark-Wilson Model: The Clark-Wilson model focuses on both integrity and confidentiality, and it is designed to prevent unauthorized access, modification, or disclosure of data. The model relies on two key principles: separation of duties and transaction integrity. The separation of duties principle ensures that no single individual can perform all the tasks required to complete a transaction, while the transaction integrity principle ensures that data remains consistent and accurate throughout the transaction.
Bell-LaPadula Model: The Bell-LaPadula model focuses on confidentiality and is designed to prevent unauthorized disclosure of data. The model uses the concepts of "no read up, no write down" to ensure that data is not disclosed to individuals who do not have appropriate access rights. The Bell-LaPadula model is particularly useful in situations where confidentiality is the primary concern, such as in military or government settings.
In summary, the security models that deal only with integrity are the Biba and Biba-Wilson models. The Biba model focuses solely on integrity and prevents unauthorized modification of data. The Biba-Wilson model is an extension of the Biba model and provides a greater level of control over data by combining the "no write up, no read down" principle of the Biba model with the "confinement" principle of the Clark-Wilson model. The Clark-Wilson model focuses on both integrity and confidentiality, while the Bell-LaPadula model focuses solely on confidentiality.