SlideShare a Scribd company logo

Lecture #6: Multilevel Security Models

D
Dr. Ramchandra Mangrulkar

This document summarizes a lecture on multi-level security. It discusses defining a security policy for an organization through a role-based model. It presents an example security policy for an educational institute, assigning different access levels like "top secret", "secret", and "confidential" to roles including the principal, faculty, staff, students, and daily workers. It emphasizes the importance of formally specifying the security policy to avoid ambiguities and inconsistencies.

Engineering
1 of 75
Download to read offline
1
2
Most read
3
Most read
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
djlogo.jpg Lecture #6: Multi-level Security Dr.Ramchandra Mangrulkar, DJSCE Mumbai August 13, 2020 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 1 / 24
djlogo.jpg Security Model What is your security policy? What rules decide who gets access to your data? Which entities governed by the policy? What are the rules that constitute the policy? Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 2 / 24
djlogo.jpg Security Model What is your security policy? What rules decide who gets access to your data? Which entities governed by the policy? What are the rules that constitute the policy? Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 2 / 24
djlogo.jpg Security Model What is your security policy? What rules decide who gets access to your data? Which entities governed by the policy? What are the rules that constitute the policy? Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 2 / 24
djlogo.jpg Security Model What is your security policy? What rules decide who gets access to your data? Which entities governed by the policy? What are the rules that constitute the policy? Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 2 / 24
djlogo.jpg How do we define Policy Security seems to mean something like “protection of assets against attack” Security for a wireless phone system may be very different from security for a military database system or an on-line banking system. Security for a given system is defined in terms of a security policy, also sometimes called a security model. The policy is the system specification wrt security. It’s a contract between the designer/implementor and the customer. Must be both achievable and adequate for the intended uses. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 3 / 24
djlogo.jpg How do we define Policy Security seems to mean something like “protection of assets against attack” Security for a wireless phone system may be very different from security for a military database system or an on-line banking system. Security for a given system is defined in terms of a security policy, also sometimes called a security model. The policy is the system specification wrt security. It’s a contract between the designer/implementor and the customer. Must be both achievable and adequate for the intended uses. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 3 / 24
djlogo.jpg How do we define Policy Security seems to mean something like “protection of assets against attack” Security for a wireless phone system may be very different from security for a military database system or an on-line banking system. Security for a given system is defined in terms of a security policy, also sometimes called a security model. The policy is the system specification wrt security. It’s a contract between the designer/implementor and the customer. Must be both achievable and adequate for the intended uses. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 3 / 24
djlogo.jpg How do we define Policy Security seems to mean something like “protection of assets against attack” Security for a wireless phone system may be very different from security for a military database system or an on-line banking system. Security for a given system is defined in terms of a security policy, also sometimes called a security model. The policy is the system specification wrt security. It’s a contract between the designer/implementor and the customer. Must be both achievable and adequate for the intended uses. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 3 / 24
djlogo.jpg Multi-level Security Figure: Multi-level Security 1 1Dieter-Gollmann-Wiley.Computer.Security.3rd.Edition Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 4 / 24
djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
djlogo.jpg Policy Document Could be done informally in a natural language document In practice, such documents too often suffer from ambiguities, inconsistencies, and omissions. To avoid these problems, Institute might prefer a formal statement of your security policy. A policy may be characterized informally, semi-formally, or formally. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 6 / 24
djlogo.jpg Policy Document Could be done informally in a natural language document In practice, such documents too often suffer from ambiguities, inconsistencies, and omissions. To avoid these problems, Institute might prefer a formal statement of your security policy. A policy may be characterized informally, semi-formally, or formally. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 6 / 24
djlogo.jpg Policy Document Could be done informally in a natural language document In practice, such documents too often suffer from ambiguities, inconsistencies, and omissions. To avoid these problems, Institute might prefer a formal statement of your security policy. A policy may be characterized informally, semi-formally, or formally. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 6 / 24
djlogo.jpg Policy Document Could be done informally in a natural language document In practice, such documents too often suffer from ambiguities, inconsistencies, and omissions. To avoid these problems, Institute might prefer a formal statement of your security policy. A policy may be characterized informally, semi-formally, or formally. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 6 / 24
djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
djlogo.jpg Secure System Design How do you design a secure system? What are you protecting and what are the potential threats? (risk assessment) What is the intuitive notion of security for such a system? (metapolicy) What are appropriate security rules that attempt to capture this notion for this system? (policy) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 8 / 24
djlogo.jpg Secure System Design How do you design a secure system? What are you protecting and what are the potential threats? (risk assessment) What is the intuitive notion of security for such a system? (metapolicy) What are appropriate security rules that attempt to capture this notion for this system? (policy) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 8 / 24
djlogo.jpg Secure System Design How do you design a secure system? What are you protecting and what are the potential threats? (risk assessment) What is the intuitive notion of security for such a system? (metapolicy) What are appropriate security rules that attempt to capture this notion for this system? (policy) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 8 / 24
djlogo.jpg Secure System Design How do you design a secure system? What are you protecting and what are the potential threats? (risk assessment) What is the intuitive notion of security for such a system? (metapolicy) What are appropriate security rules that attempt to capture this notion for this system? (policy) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 8 / 24
djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
djlogo.jpg Multilevel Security Models Bell La Padula Model Biba Model Chinese Wall Model Clark-Wilson Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 10 / 24
djlogo.jpg Multilevel Security Models Bell La Padula Model Biba Model Chinese Wall Model Clark-Wilson Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 10 / 24
djlogo.jpg Multilevel Security Models Bell La Padula Model Biba Model Chinese Wall Model Clark-Wilson Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 10 / 24
djlogo.jpg Multilevel Security Models Bell La Padula Model Biba Model Chinese Wall Model Clark-Wilson Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 10 / 24
djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
djlogo.jpg Bell La Padula Model for Institute Security Level Subject Object Top Secret Principal Personal Email Secret Secretary Official Email Confidential Office Assistant Personal Data(Drive), Official Data(PC) Unclassified HOD, Faculty NAAC Data, NBA Data, AICTE Data Table: Example: Simple Bell Lapdula Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 12 / 24
djlogo.jpg Bell La Padula Model Figure: Information Flow 2 Information Flow “UP”not “DOWN” “No Read up”and “No Write Down” 2www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 13 / 24
djlogo.jpg Bell La Padula Model Figure: Information Flow 2 Information Flow “UP”not “DOWN” “No Read up”and “No Write Down” 2www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 13 / 24
djlogo.jpg Bell La Padula Model Figure: Information Flow 2 Information Flow “UP”not “DOWN” “No Read up”and “No Write Down” 2www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 13 / 24
djlogo.jpg Dominates Relation Figure: The Dominates Relation 3 3https://www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 14 / 24
djlogo.jpg Partial Order Figure: Partial Ordering 4 4https://www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 15 / 24
djlogo.jpg Lattices Algebraically, the (full) set of labels with their ordering would form a lattice. This is sometimes called “lattice-based security.” a lattice is a partially ordered set (or poset) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 16 / 24
djlogo.jpg Lattices Algebraically, the (full) set of labels with their ordering would form a lattice. This is sometimes called “lattice-based security.” a lattice is a partially ordered set (or poset) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 16 / 24
djlogo.jpg Secure Reading Suppose subject S with authorization (LS , CS ) asks to read an object O with classification (LO, CO). Under what conditions should the request be granted by the system? For example, suppose a subject has clearance (Secret: Crypto). Which of the following should he be able to read? -document labeled (Confidential: Crypto) -document labeled (Top Secret: Crypto) -document labeled (Secret: Nuclear) -document labeled (Secret: Crypto, Nuclear) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 17 / 24
djlogo.jpg Secure Reading Suppose subject S with authorization (LS , CS ) asks to read an object O with classification (LO, CO). Under what conditions should the request be granted by the system? For example, suppose a subject has clearance (Secret: Crypto). Which of the following should he be able to read? -document labeled (Confidential: Crypto) -document labeled (Top Secret: Crypto) -document labeled (Secret: Nuclear) -document labeled (Secret: Crypto, Nuclear) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 17 / 24
djlogo.jpg Simple-Security Property The Simple-Security Property: Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) dominates (LO, CO). OR Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) (LO; CO): Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 18 / 24
djlogo.jpg Simple-Security Property The Simple-Security Property: Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) dominates (LO, CO). OR Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) (LO; CO): Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 18 / 24
djlogo.jpg Simple-Security Property The Simple-Security Property: Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) dominates (LO, CO). OR Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) (LO; CO): Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 18 / 24
djlogo.jpg Figure: Reading Information 5 5http://nob.cs.ucdavis.edu/ Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 19 / 24
djlogo.jpg The *-Property The *-Property: Subject S with clearance (LS , CS ) may be granted write access to object O with classification (LO, CO) only if (LS , CS ) (LO; CO): Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 20 / 24
djlogo.jpg Figure: Writing Information 6 6http://nob.cs.ucdavis.edu/ Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 21 / 24
djlogo.jpg Bell Lapdula Model : No Read Up, No Write Down Figure: Writing Information 7 7http://nob.cs.ucdavis.edu/ Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 22 / 24
djlogo.jpg Example Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 23 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24

More Related Content

PDF
Lecture #3: Defense Strategies and Techniques: Part II
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #4: Access Control Policies
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #8: Clark-Wilson & Chinese Wall Model for Multilevel Security
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #2: Defence Strategies and Techniques (Security): Part I
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #9 : Single Sign on and Federation Identity Management
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #12,#13 : Program and OS Security -Part I
Dr. Ramchandra Mangrulkar
 
PPTX
Leverage Endpooint Visibilit with MITRE ATT&CK Framework
Digit Oktavianto
 
PDF
AI and Machine Learning In Cybersecurity | A Saviour or Enemy?
SahilRao25
 
Lecture #3: Defense Strategies and Techniques: Part II
Dr. Ramchandra Mangrulkar
 
Lecture #4: Access Control Policies
Dr. Ramchandra Mangrulkar
 
Lecture #8: Clark-Wilson & Chinese Wall Model for Multilevel Security
Dr. Ramchandra Mangrulkar
 
Lecture #2: Defence Strategies and Techniques (Security): Part I
Dr. Ramchandra Mangrulkar
 
Lecture #9 : Single Sign on and Federation Identity Management
Dr. Ramchandra Mangrulkar
 
Lecture #12,#13 : Program and OS Security -Part I
Dr. Ramchandra Mangrulkar
 
Leverage Endpooint Visibilit with MITRE ATT&CK Framework
Digit Oktavianto
 
AI and Machine Learning In Cybersecurity | A Saviour or Enemy?
SahilRao25
 

What's hot (20)

PDF
OA_Cyber security course with AI
Object Automation
 
PPTX
Adversary Emulation and Its Importance for Improving Security Posture in Orga...
Digit Oktavianto
 
PPTX
AI cybersecurity
ShauryaGupta38
 
PPTX
Product security by Blockchain, AI and Security Certs
LabSharegroup
 
PDF
Soc and siem and threat hunting
Vikas Jain
 
PPTX
Blackbox Testing in AI Cybersecurity
ShauryaGupta38
 
PPTX
AI and ML in Cybersecurity
Forcepoint LLC
 
PDF
AI for security or security for AI - Sergey Gordeychik
Sergey Gordeychik
 
PDF
Machine Learning in Cyber Security Domain
BGA Cyber Security
 
PPT
Mark Arena - Cyber Threat Intelligence #uisgcon9
UISGCON
 
PDF
AI and Cybersecurity - Food for Thought
NUS-ISS
 
PDF
Challenges in Applying AI to Enterprise Cybersecurity
Tahseen Shabab
 
PPTX
Role of Forensic Triage In Cyber Security Trends 2021
Amrit Chhetri
 
PDF
Big Data Security Challenges: An Overview and Application of User Behavior An...
IRJET Journal
 
PDF
Guardians of the future what should we do to secure future cyberspace
Aladdin Dandis
 
PDF
How Machine Learning & AI Will Improve Cyber Security
DevOps.com
 
PPTX
From machine learning to deepfakes - how AI is revolutionizing cybersecurity
Infosec
 
PPT
Malware analysis on android using supervised machine learning techniques
Md. Shohel Rana
 
PDF
Application of Machine Learning in Cyber Security
Dr. Umesh Rao.Hodeghatta
 
PDF
Cyber Threat Intelligence - It's not just about the feeds
Iain Dickson
 
OA_Cyber security course with AI
Object Automation
 
Adversary Emulation and Its Importance for Improving Security Posture in Orga...
Digit Oktavianto
 
AI cybersecurity
ShauryaGupta38
 
Product security by Blockchain, AI and Security Certs
LabSharegroup
 
Soc and siem and threat hunting
Vikas Jain
 
Blackbox Testing in AI Cybersecurity
ShauryaGupta38
 
AI and ML in Cybersecurity
Forcepoint LLC
 
AI for security or security for AI - Sergey Gordeychik
Sergey Gordeychik
 
Machine Learning in Cyber Security Domain
BGA Cyber Security
 
Mark Arena - Cyber Threat Intelligence #uisgcon9
UISGCON
 
AI and Cybersecurity - Food for Thought
NUS-ISS
 
Challenges in Applying AI to Enterprise Cybersecurity
Tahseen Shabab
 
Role of Forensic Triage In Cyber Security Trends 2021
Amrit Chhetri
 
Big Data Security Challenges: An Overview and Application of User Behavior An...
IRJET Journal
 
Guardians of the future what should we do to secure future cyberspace
Aladdin Dandis
 
How Machine Learning & AI Will Improve Cyber Security
DevOps.com
 
From machine learning to deepfakes - how AI is revolutionizing cybersecurity
Infosec
 
Malware analysis on android using supervised machine learning techniques
Md. Shohel Rana
 
Application of Machine Learning in Cyber Security
Dr. Umesh Rao.Hodeghatta
 
Cyber Threat Intelligence - It's not just about the feeds
Iain Dickson
 
Ad

Similar to Lecture #6: Multilevel Security Models (20)

DOCX
Chapter 1Information Security OverviewCopyright © 2014 by Mc
EstelaJeffery653
 
PPTX
Need for Data Protection Training - How E-learning Can Help?
CommLab India – Rapid eLearning Solutions
 
PDF
A Critical Analysis Of Information Security -A Case Study Of Cognizant Techno...
Finni Rice
 
PPTX
Cybersecurity vs Data Science A Roadmap.pptx
Infosectrain3
 
PPTX
Cybersecurity vs Data Science A Roadmap.pptx
Infosectrain3
 
PDF
Top-Rated Professional Security Services for Comprehensive Protection.pdf
private security
 
PDF
ICISS Newsletter Sept 14
Capt SB Tyagi, COAC'CC*,FISM,CSC,
 
PPTX
ION-E Defense In Depth Presentation for The Institiute of Internal Auditors
mdagrossa
 
PPTX
PACE-IT, Security+2.6: Security Related Awareness and Training
Pace IT at Edmonds Community College
 
PPTX
Top_10_Interview_Questions_That_You_Should_Know_as_an_Information.pptx
infosec train
 
PDF
Security policy.pdf
Md. Sajjat Hossain
 
DOCX
Advisory from Professionals Preparing Information .docx
katherncarlyle
 
DOCX
Advisory from Professionals Preparing Information .docx
daniahendric
 
PDF
Vulnerability Analyst interview Questions.pdf
infosec train
 
PDF
EMEA: Using Security Metrics to Drive Action - 22 Experts Share How to Commun...
Mighty Guides, Inc.
 
PDF
Using Security Metrics to Drive Action in Asia Pacific - 22 Experts Share How...
Mighty Guides, Inc.
 
PDF
Tech Talent Meetup Hacking Security Event Recap
Dominic Vogel
 
PPT
BTCON 03 on security transformation
Sri Joydip
 
DOCX
Running head PRACTICAL CONNECTIONS PAPER 1Executive P.docx
todd581
 
DOCX
Running head PRACTICAL CONNECTIONS PAPER 1Executive P.docx
glendar3
 
Chapter 1Information Security OverviewCopyright © 2014 by Mc
EstelaJeffery653
 
Need for Data Protection Training - How E-learning Can Help?
CommLab India – Rapid eLearning Solutions
 
A Critical Analysis Of Information Security -A Case Study Of Cognizant Techno...
Finni Rice
 
Cybersecurity vs Data Science A Roadmap.pptx
Infosectrain3
 
Cybersecurity vs Data Science A Roadmap.pptx
Infosectrain3
 
Top-Rated Professional Security Services for Comprehensive Protection.pdf
private security
 
ICISS Newsletter Sept 14
Capt SB Tyagi, COAC'CC*,FISM,CSC,
 
ION-E Defense In Depth Presentation for The Institiute of Internal Auditors
mdagrossa
 
PACE-IT, Security+2.6: Security Related Awareness and Training
Pace IT at Edmonds Community College
 
Top_10_Interview_Questions_That_You_Should_Know_as_an_Information.pptx
infosec train
 
Security policy.pdf
Md. Sajjat Hossain
 
Advisory from Professionals Preparing Information .docx
katherncarlyle
 
Advisory from Professionals Preparing Information .docx
daniahendric
 
Vulnerability Analyst interview Questions.pdf
infosec train
 
EMEA: Using Security Metrics to Drive Action - 22 Experts Share How to Commun...
Mighty Guides, Inc.
 
Using Security Metrics to Drive Action in Asia Pacific - 22 Experts Share How...
Mighty Guides, Inc.
 
Tech Talent Meetup Hacking Security Event Recap
Dominic Vogel
 
BTCON 03 on security transformation
Sri Joydip
 
Running head PRACTICAL CONNECTIONS PAPER 1Executive P.docx
todd581
 
Running head PRACTICAL CONNECTIONS PAPER 1Executive P.docx
glendar3
 
Ad

More from Dr. Ramchandra Mangrulkar (20)

PDF
Gibbs sampling is a Markov Chain Monte Carlo (MCMC)
Dr. Ramchandra Mangrulkar
 
PDF
Introduction to Research and Publications Tools.pdf
Dr. Ramchandra Mangrulkar
 
PDF
Blockchain#2.pdf
Dr. Ramchandra Mangrulkar
 
PDF
Blockchain#1.pdf
Dr. Ramchandra Mangrulkar
 
PDF
Blockchain#3.pdf
Dr. Ramchandra Mangrulkar
 
PDF
Manuscript Preparation using Latex: A Cloud Based Approach(Overleaf)
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #32: Forensic Duplication
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #32: Digital Forensics : Evidence Handling, Validation and Reporting
Dr. Ramchandra Mangrulkar
 
PDF
LEcture #28-#30
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #31 : Windows Forensics
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #25 : Oauth 2.0
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #24 : Cross Site Request Forgery (CSRF)
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #22: Web Privacy & Security Breach
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #22 : Web Privacy & Security Breach
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #21: HTTPS , SSL & TLS
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #18 - #20: Web Browser and Web Application Security
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #15: Buffer Overflow Attack (Non Malicious Attack)
Dr. Ramchandra Mangrulkar
 
PDF
Lecture # 14: Salami and Linearization Attacks
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #7: Bell Lapdula and Biba Model of Multilevel Security
Dr. Ramchandra Mangrulkar
 
PDF
Lecture #1: Access Control : Various Cyber attacks and Latest Statistics
Dr. Ramchandra Mangrulkar
 
Gibbs sampling is a Markov Chain Monte Carlo (MCMC)
Dr. Ramchandra Mangrulkar
 
Introduction to Research and Publications Tools.pdf
Dr. Ramchandra Mangrulkar
 
Blockchain#2.pdf
Dr. Ramchandra Mangrulkar
 
Blockchain#1.pdf
Dr. Ramchandra Mangrulkar
 
Blockchain#3.pdf
Dr. Ramchandra Mangrulkar
 
Manuscript Preparation using Latex: A Cloud Based Approach(Overleaf)
Dr. Ramchandra Mangrulkar
 
Lecture #32: Forensic Duplication
Dr. Ramchandra Mangrulkar
 
Lecture #32: Digital Forensics : Evidence Handling, Validation and Reporting
Dr. Ramchandra Mangrulkar
 
LEcture #28-#30
Dr. Ramchandra Mangrulkar
 
Lecture #31 : Windows Forensics
Dr. Ramchandra Mangrulkar
 
Lecture #25 : Oauth 2.0
Dr. Ramchandra Mangrulkar
 
Lecture #24 : Cross Site Request Forgery (CSRF)
Dr. Ramchandra Mangrulkar
 
Lecture #22: Web Privacy & Security Breach
Dr. Ramchandra Mangrulkar
 
Lecture #22 : Web Privacy & Security Breach
Dr. Ramchandra Mangrulkar
 
Lecture #21: HTTPS , SSL & TLS
Dr. Ramchandra Mangrulkar
 
Lecture #18 - #20: Web Browser and Web Application Security
Dr. Ramchandra Mangrulkar
 
Lecture #15: Buffer Overflow Attack (Non Malicious Attack)
Dr. Ramchandra Mangrulkar
 
Lecture # 14: Salami and Linearization Attacks
Dr. Ramchandra Mangrulkar
 
Lecture #7: Bell Lapdula and Biba Model of Multilevel Security
Dr. Ramchandra Mangrulkar
 
Lecture #1: Access Control : Various Cyber attacks and Latest Statistics
Dr. Ramchandra Mangrulkar
 

Recently uploaded (20)

PPTX
Infosys Presentation by1.Riyan Bagwan 2.Samadhan Naiknavare 3.Gaurav Shinde 4...
bapushinde7218
 
PPTX
Welding lecture in detail for understanding
sahilpoonia10
 
PDF
Mohammad Mahdi Farshadian CV - Prospective PhD Student 2026
Educational Group Mohammad Farshadian
 
PDF
Embodied AI: Ushering in the Next Era of Intelligent Systems
Yu Huang
 
PPT
Project quality management in manufacturing
BarMusaTetik
 
PPTX
MCN 401 KTU-2019-PPE KITS-MODULE 2.pptx
VinayB68
 
PPTX
web development for engineering and engineering
keshriji700
 
PPTX
additive manufacturing of ss316l using mig welding
premcdr7799
 
PDF
PRIZ Academy - 9 Windows Thinking Where to Invest Today to Win Tomorrow.pdf
PRIZ Guru
 
PPTX
IOT PPTs Week 10 Lecture Material.pptx of NPTEL Smart Cities contd
ssusera400e8
 
PPTX
Internet of Things (IOT) - A guide to understanding
Davies Chacko
 
PPTX
Recipes for Real Time Voice AI WebRTC, SLMs and Open Source Software.pptx
Alberto González Trastoy
 
PPTX
UNIT-1 - COAL BASED THERMAL POWER PLANTS
Chandra Kumar S
 
PPTX
Engineering Ethics, Safety and Environment [Autosaved] (1).pptx
MehrabTaseenTalukder
 
PDF
R24 SURVEYING LAB MANUAL for civil enggi
MNANDITHACIVILSTAFF
 
PPT
Mechanical Engineering MATERIALS Selection
arsalanahmad705384
 
PPTX
Sustainable Sites - Green Building Construction
mhdumerali
 
PPTX
Construction Project Organization Group 2.pptx
vj5agdales
 
PDF
TFEC-4-2020-Design-Guide-for-Timber-Roof-Trusses.pdf
AinieButt1
 
DOCX
ASol_English-Language-Literature-Set-1-27-02-2023-converted.docx
AYUSHMANAV
 
Infosys Presentation by1.Riyan Bagwan 2.Samadhan Naiknavare 3.Gaurav Shinde 4...
bapushinde7218
 
Welding lecture in detail for understanding
sahilpoonia10
 
Mohammad Mahdi Farshadian CV - Prospective PhD Student 2026
Educational Group Mohammad Farshadian
 
Embodied AI: Ushering in the Next Era of Intelligent Systems
Yu Huang
 
Project quality management in manufacturing
BarMusaTetik
 
MCN 401 KTU-2019-PPE KITS-MODULE 2.pptx
VinayB68
 
web development for engineering and engineering
keshriji700
 
additive manufacturing of ss316l using mig welding
premcdr7799
 
PRIZ Academy - 9 Windows Thinking Where to Invest Today to Win Tomorrow.pdf
PRIZ Guru
 
IOT PPTs Week 10 Lecture Material.pptx of NPTEL Smart Cities contd
ssusera400e8
 
Internet of Things (IOT) - A guide to understanding
Davies Chacko
 
Recipes for Real Time Voice AI WebRTC, SLMs and Open Source Software.pptx
Alberto González Trastoy
 
UNIT-1 - COAL BASED THERMAL POWER PLANTS
Chandra Kumar S
 
Engineering Ethics, Safety and Environment [Autosaved] (1).pptx
MehrabTaseenTalukder
 
R24 SURVEYING LAB MANUAL for civil enggi
MNANDITHACIVILSTAFF
 
Mechanical Engineering MATERIALS Selection
arsalanahmad705384
 
Sustainable Sites - Green Building Construction
mhdumerali
 
Construction Project Organization Group 2.pptx
vj5agdales
 
TFEC-4-2020-Design-Guide-for-Timber-Roof-Trusses.pdf
AinieButt1
 
ASol_English-Language-Literature-Set-1-27-02-2023-converted.docx
AYUSHMANAV
 

Lecture #6: Multilevel Security Models

  • 1. djlogo.jpg Lecture #6: Multi-level Security Dr.Ramchandra Mangrulkar, DJSCE Mumbai August 13, 2020 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 1 / 24
  • 2. djlogo.jpg Security Model What is your security policy? What rules decide who gets access to your data? Which entities governed by the policy? What are the rules that constitute the policy? Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 2 / 24
  • 3. djlogo.jpg Security Model What is your security policy? What rules decide who gets access to your data? Which entities governed by the policy? What are the rules that constitute the policy? Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 2 / 24
  • 4. djlogo.jpg Security Model What is your security policy? What rules decide who gets access to your data? Which entities governed by the policy? What are the rules that constitute the policy? Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 2 / 24
  • 5. djlogo.jpg Security Model What is your security policy? What rules decide who gets access to your data? Which entities governed by the policy? What are the rules that constitute the policy? Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 2 / 24
  • 6. djlogo.jpg How do we define Policy Security seems to mean something like “protection of assets against attack” Security for a wireless phone system may be very different from security for a military database system or an on-line banking system. Security for a given system is defined in terms of a security policy, also sometimes called a security model. The policy is the system specification wrt security. It’s a contract between the designer/implementor and the customer. Must be both achievable and adequate for the intended uses. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 3 / 24
  • 7. djlogo.jpg How do we define Policy Security seems to mean something like “protection of assets against attack” Security for a wireless phone system may be very different from security for a military database system or an on-line banking system. Security for a given system is defined in terms of a security policy, also sometimes called a security model. The policy is the system specification wrt security. It’s a contract between the designer/implementor and the customer. Must be both achievable and adequate for the intended uses. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 3 / 24
  • 8. djlogo.jpg How do we define Policy Security seems to mean something like “protection of assets against attack” Security for a wireless phone system may be very different from security for a military database system or an on-line banking system. Security for a given system is defined in terms of a security policy, also sometimes called a security model. The policy is the system specification wrt security. It’s a contract between the designer/implementor and the customer. Must be both achievable and adequate for the intended uses. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 3 / 24
  • 9. djlogo.jpg How do we define Policy Security seems to mean something like “protection of assets against attack” Security for a wireless phone system may be very different from security for a military database system or an on-line banking system. Security for a given system is defined in terms of a security policy, also sometimes called a security model. The policy is the system specification wrt security. It’s a contract between the designer/implementor and the customer. Must be both achievable and adequate for the intended uses. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 3 / 24
  • 10. djlogo.jpg Multi-level Security Figure: Multi-level Security 1 1Dieter-Gollmann-Wiley.Computer.Security.3rd.Edition Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 4 / 24
  • 11. djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
  • 12. djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
  • 13. djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
  • 14. djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
  • 15. djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
  • 16. djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
  • 17. djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
  • 18. djlogo.jpg Multi Level Security Model: The Institute Model What is your security policy? Ans: Role based model of Security. What rules decide who gets access to your data? Ans: defined according to policy. Which entities governed by the policy? Ans: Principal, Hod, Faculty, Non-Teaching, Office Persons, Teaching Assistant, Student, Daily Wages Workers What are the rules that constitute the policy? Principal, HOD - Top Secret, Faculty ,Office Staff- Secret Teaching Assistant, Student-Confidential Daily Wages Workers-Unclassified Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 5 / 24
  • 19. djlogo.jpg Policy Document Could be done informally in a natural language document In practice, such documents too often suffer from ambiguities, inconsistencies, and omissions. To avoid these problems, Institute might prefer a formal statement of your security policy. A policy may be characterized informally, semi-formally, or formally. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 6 / 24
  • 20. djlogo.jpg Policy Document Could be done informally in a natural language document In practice, such documents too often suffer from ambiguities, inconsistencies, and omissions. To avoid these problems, Institute might prefer a formal statement of your security policy. A policy may be characterized informally, semi-formally, or formally. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 6 / 24
  • 21. djlogo.jpg Policy Document Could be done informally in a natural language document In practice, such documents too often suffer from ambiguities, inconsistencies, and omissions. To avoid these problems, Institute might prefer a formal statement of your security policy. A policy may be characterized informally, semi-formally, or formally. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 6 / 24
  • 22. djlogo.jpg Policy Document Could be done informally in a natural language document In practice, such documents too often suffer from ambiguities, inconsistencies, and omissions. To avoid these problems, Institute might prefer a formal statement of your security policy. A policy may be characterized informally, semi-formally, or formally. Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 6 / 24
  • 23. djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
  • 24. djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
  • 25. djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
  • 26. djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
  • 27. djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
  • 28. djlogo.jpg Policy Document Metapolicy: The security goals in the most abstract sense Policy: System-specific constraints intended to enforce the metapolicy Faculty/staff may use student SAP numbers in documents/files/postings All older docs containing SAP must be destroyed unless deemed necessary Documents deemed necessary to retain must be kept in secure storage SAP Number of Students/Staffs must be protected from disclosure Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 7 / 24
  • 29. djlogo.jpg Secure System Design How do you design a secure system? What are you protecting and what are the potential threats? (risk assessment) What is the intuitive notion of security for such a system? (metapolicy) What are appropriate security rules that attempt to capture this notion for this system? (policy) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 8 / 24
  • 30. djlogo.jpg Secure System Design How do you design a secure system? What are you protecting and what are the potential threats? (risk assessment) What is the intuitive notion of security for such a system? (metapolicy) What are appropriate security rules that attempt to capture this notion for this system? (policy) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 8 / 24
  • 31. djlogo.jpg Secure System Design How do you design a secure system? What are you protecting and what are the potential threats? (risk assessment) What is the intuitive notion of security for such a system? (metapolicy) What are appropriate security rules that attempt to capture this notion for this system? (policy) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 8 / 24
  • 32. djlogo.jpg Secure System Design How do you design a secure system? What are you protecting and what are the potential threats? (risk assessment) What is the intuitive notion of security for such a system? (metapolicy) What are appropriate security rules that attempt to capture this notion for this system? (policy) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 8 / 24
  • 33. djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
  • 34. djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
  • 35. djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
  • 36. djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
  • 37. djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
  • 38. djlogo.jpg Secure System Design What is an overall system architecture that supports our security goals? (system design) By what specific mechanisms might the security goals be accomplished? (detailed design) Does the system implementation accomplish the goal? How certain can we be of our assessment? Are there intuitively insecure behaviors that fall outside the range of the policy? Lots of other questions... Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 9 / 24
  • 39. djlogo.jpg Multilevel Security Models Bell La Padula Model Biba Model Chinese Wall Model Clark-Wilson Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 10 / 24
  • 40. djlogo.jpg Multilevel Security Models Bell La Padula Model Biba Model Chinese Wall Model Clark-Wilson Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 10 / 24
  • 41. djlogo.jpg Multilevel Security Models Bell La Padula Model Biba Model Chinese Wall Model Clark-Wilson Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 10 / 24
  • 42. djlogo.jpg Multilevel Security Models Bell La Padula Model Biba Model Chinese Wall Model Clark-Wilson Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 10 / 24
  • 43. djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
  • 44. djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
  • 45. djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
  • 46. djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
  • 47. djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
  • 48. djlogo.jpg Bell LaPadula Model David Bell, Len Lapadula An abstract model intended to control information flow Prevent unauthorized disclosure of information Objects have a security level (e.g., unclassified, classified, secret, top secret) Security levels are arranged in Linear order Subjects (think: principals, processes) have a level Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 11 / 24
  • 49. djlogo.jpg Bell La Padula Model for Institute Security Level Subject Object Top Secret Principal Personal Email Secret Secretary Official Email Confidential Office Assistant Personal Data(Drive), Official Data(PC) Unclassified HOD, Faculty NAAC Data, NBA Data, AICTE Data Table: Example: Simple Bell Lapdula Model Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 12 / 24
  • 50. djlogo.jpg Bell La Padula Model Figure: Information Flow 2 Information Flow “UP”not “DOWN” “No Read up”and “No Write Down” 2www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 13 / 24
  • 51. djlogo.jpg Bell La Padula Model Figure: Information Flow 2 Information Flow “UP”not “DOWN” “No Read up”and “No Write Down” 2www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 13 / 24
  • 52. djlogo.jpg Bell La Padula Model Figure: Information Flow 2 Information Flow “UP”not “DOWN” “No Read up”and “No Write Down” 2www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 13 / 24
  • 53. djlogo.jpg Dominates Relation Figure: The Dominates Relation 3 3https://www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 14 / 24
  • 54. djlogo.jpg Partial Order Figure: Partial Ordering 4 4https://www.cs.utexas.edu/~byoung/cs361 Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 15 / 24
  • 55. djlogo.jpg Lattices Algebraically, the (full) set of labels with their ordering would form a lattice. This is sometimes called “lattice-based security.” a lattice is a partially ordered set (or poset) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 16 / 24
  • 56. djlogo.jpg Lattices Algebraically, the (full) set of labels with their ordering would form a lattice. This is sometimes called “lattice-based security.” a lattice is a partially ordered set (or poset) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 16 / 24
  • 57. djlogo.jpg Secure Reading Suppose subject S with authorization (LS , CS ) asks to read an object O with classification (LO, CO). Under what conditions should the request be granted by the system? For example, suppose a subject has clearance (Secret: Crypto). Which of the following should he be able to read? -document labeled (Confidential: Crypto) -document labeled (Top Secret: Crypto) -document labeled (Secret: Nuclear) -document labeled (Secret: Crypto, Nuclear) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 17 / 24
  • 58. djlogo.jpg Secure Reading Suppose subject S with authorization (LS , CS ) asks to read an object O with classification (LO, CO). Under what conditions should the request be granted by the system? For example, suppose a subject has clearance (Secret: Crypto). Which of the following should he be able to read? -document labeled (Confidential: Crypto) -document labeled (Top Secret: Crypto) -document labeled (Secret: Nuclear) -document labeled (Secret: Crypto, Nuclear) Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 17 / 24
  • 59. djlogo.jpg Simple-Security Property The Simple-Security Property: Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) dominates (LO, CO). OR Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) (LO; CO): Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 18 / 24
  • 60. djlogo.jpg Simple-Security Property The Simple-Security Property: Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) dominates (LO, CO). OR Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) (LO; CO): Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 18 / 24
  • 61. djlogo.jpg Simple-Security Property The Simple-Security Property: Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) dominates (LO, CO). OR Subject S with clearance (LS , CS ) may be granted read access to object O with classification (LO, CO) only if (LS , CS ) (LO; CO): Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 18 / 24
  • 62. djlogo.jpg Figure: Reading Information 5 5http://nob.cs.ucdavis.edu/ Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 19 / 24
  • 63. djlogo.jpg The *-Property The *-Property: Subject S with clearance (LS , CS ) may be granted write access to object O with classification (LO, CO) only if (LS , CS ) (LO; CO): Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 20 / 24
  • 64. djlogo.jpg Figure: Writing Information 6 6http://nob.cs.ucdavis.edu/ Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 21 / 24
  • 65. djlogo.jpg Bell Lapdula Model : No Read Up, No Write Down Figure: Writing Information 7 7http://nob.cs.ucdavis.edu/ Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 22 / 24
  • 66. djlogo.jpg Example Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 23 / 24
  • 67. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
  • 68. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
  • 69. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
  • 70. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
  • 71. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
  • 72. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
  • 73. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
  • 74. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24
  • 75. djlogo.jpg Open Questions Teaching assistant reading notes created by faculty. Faculty members correcting assignments of students. Faculty members correcting notes of Teaching Assistant. AICTE Letter received by Principal is opened and read by HODs HOD correcting applications made to Principal Principal putting remarks on Students applications Students correcting ppts made by Faculty HODs writing remarks on AICTE files meant for Principal HODs reading billing information submitted by Daily workers Dr.Ramchandra Mangrulkar, DJSCE Mumbai Lecture #6: Multi-level Security August 13, 2020 24 / 24