Q14Information Security Systems
Question
Describe the Bell-LaPadula security model and its primary properties.
Answer
A critical analysis of the Bell-LaPadula model. Explains the strict military architecture of "No Read Up" and "No Write Down" that mathematically guarantees absolute data confidentiality across highly classified clearance levels.
Engineered for the US Department of Defense, the Bell-LaPadula (BLP) model is an absolute, mathematically rigid State Machine architecture designed strictly to enforce Access Control and guarantee one single property: Confidentiality. It mathematically prevents highly classified information from leaking to lower-cleared entities.
The Architectural Matrix
The system is divided into Subjects (users) and Objects (files). Every entity is mathematically assigned a strict Security Clearance Level (e.g., Unclassified, Secret, Top Secret). BLP enforces two absolute, unbreakable mathematical rules:
- 1. The Simple Security Property (No Read Up): A Subject at a given clearance level mathematically CANNOT read an Object at a higher classification level. (A "Secret" user cannot read a "Top Secret" file). This is standard and obvious.
- *2. The Star Property (-Property / No Write Down):** The absolute genius of the model. A Subject at a given clearance level mathematically CANNOT write information into an Object at a LOWER classification level. (A "Top Secret" user cannot copy-paste data into an "Unclassified" email).
The Prevention of Trojan Horses
The Star Property seems counter-intuitive (why can't a General write an unclassified memo?). However, it mathematically eradicates the Trojan Horse vulnerability. If a General's computer is infected with a Trojan, the malware has "Top Secret" access. Without the Star Property, the malware could silently read top-secret war plans and violently write them to an unclassified, publicly accessible file, destroying the nation's security. The Star Property makes this data leak mathematically impossible.