I have been reading on security policies and the question wether Bell-LaPadula can be used to implement Chinese Wall. Does anyone know more about it?
$\begingroup$
$\endgroup$
6
-
$\begingroup$ Please outline how you think the simulation should work. As it is, the question is a little trite. $\endgroup$– Raphael ♦Apr 23, 2012 at 6:35
-
1$\begingroup$ There is a comparison between Chinese Wall & BLP in the paper by Brewer & Nash. Is it part of the answer ? $\endgroup$– RomualdApr 23, 2012 at 12:51
-
$\begingroup$ actually i found the answer by reference book (Computer Security: Art and Science By Matt Bishop)(chapter 7 section 1) suggested by my friend - first the Bell-LaPadula Model cannot capture changes over time. second, more serious problem arises when one considers that subjects in the Chinese Wall model may choose which CDs(company dataset) to access; in other words, initially a subject is free to access all objects. the Bell-LaPadula Model cannot emulate the Chinese Wall model. $\endgroup$– siddharthApr 24, 2012 at 6:04
-
$\begingroup$ @siddharth, would you like to make your comment the answer? $\endgroup$– MerbsNov 27, 2012 at 17:32
-
$\begingroup$ @Raphael, if siddharth doesn't answer, can you shift his comment into an answer? $\endgroup$– MerbsNov 27, 2012 at 17:33
|
Show 1 more comment
2 Answers
$\begingroup$
$\endgroup$
first the Bell-LaPadula Model cannot capture changes over time. second, more serious problem arises when one considers that subjects in the Chinese Wall model may choose which CDs(company dataset) to access; in other words, initially a subject is free to access all objects. the Bell-LaPadula Model cannot emulate the Chinese Wall model.
$\begingroup$
$\endgroup$
1
Ravi S. Sandhu has given a part of a positive answer in his 1992 paper entitled Lattice-Based Enforcement of Chinese Walls (preprint). The idea is to build a lattice from the $n$ Conflict Of Interest (COI) classes defined in the Chinese Wall: elements are tuples of the form $[l_1, \ldots, l_n]$ where $l_i$ is either $\bot$ when no document from class $i$ has been accessed yet or a document's identifier from the class $i$.
To capture the dynamic character of the Chinese Wall policy model, the users' labels have to be updated when he/she reads a document pertaining to a COI class. In this sense, the translation is closer to high-water mark than to pure Bell-LaPadula.
-
$\begingroup$ Link-only answers are troublesome because links break; in particular, if the preprint is no longer available, the information content of this answer if zero for all Elsevier-paywalled visitors. Please give a short summary of the article, i.e. at least the core ideas. $\endgroup$– Raphael ♦Apr 1, 2015 at 17:18