A company has projects in a number of cities. It also employs a Bell-LaPadula se
ID: 3577619 • Letter: A
Question
A company has projects in a number of cities. It also employs a Bell-LaPadula security policy with the usual Clearances and classifications: Top Secret, Secret, Confidential, Unclassified. All the Compartments are derived from the cities where the company has projects: Atlanta, Boston, Chicago, Houston, Los Angeles, New York. In each example below we will assume that the Subject and Object have the same Clearance and Classification. A Subject S1 wishes to write to an Object O1 and the subject S1's compartments are {Boston, Los Angeles, New York}. What are all the possible types of sets of Compartments for S1 that would allow the write request would be accepted? (To save you from a lot of writing, call elements in a compartment A, B, C, H, LA, and NY.) Again the Subject S2 and Object O2 have the same Clearance and Classification. The Subject S2 wishes to read the Object O2 and the Subject S2's compartments are {Atlanta, Chicago, Houston}. What are all the possible types of sets of Compartments so that the read request would be accepted?Explanation / Answer
If we consider the classifications as following:
Top Secret - TS
Secret - S
Confidential - C
Unclassified - U
It is mentioned that the Subject and Object will have same Classification and Clearance
a) The set of available classes for Subject and Object will be - {TS,S,C,U}
The set of compartments available for Subject S1 are {B,LA,NY}
The no of combinations that can be possible from the above sets are - 12
The Subject S1 can write to object O1 - {(TS,B),(TS,LA),(TS,NY)}
{(S,B),(S,LA),(S,NY)}
{(C,B),(C,LA),(C,NY)}
{(U,B),(U,LA),(U,NY)}
It depends on the Type of Clearance and Classifcation that both the subject and object are having.
If it is TS then it can write {(TS,B),(TS,LA),(TS,NY)}
b) If the read requests are to be accepted then the Object should have the Combination of the Classification and Clearance with the Compartments like
If the Classification and Clearance is 'TS', then the Object O2 should have {(TS,A),(TS,C),(TS,H)}
The set of values that allows a read request depends on the Classification and Clearing Type
IF the Object O2 consists of all the possible values then read requests will be accpeted all the time
The Object O2 should look like - {(TS,A),(TS,C),(TS,H),(S,A),(S,C),(S,H),(C,A),(C,C),(C,H),(U,A),(U,C),(U,H)}
Related Questions
drjack9650@gmail.com
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.