Busy. Please wait.

show password
Forgot Password?

Don't have an account?  Sign up 

Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account.
We do not share your email address with others. It is only used to allow you to reset your password. For details read our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.

Remove ads
Don't know
remaining cards
To flip the current card, click it or press the Spacebar key.  To move the current card to one of the three colored boxes, click on the box.  You may also press the UP ARROW key to move the card to the "Know" box, the DOWN ARROW key to move the card to the "Don't know" box, or the RIGHT ARROW key to move the card to the Remaining box.  You may also click on the card displayed in any of the three boxes to bring that card back to the center.

Pass complete!

"Know" box contains:
Time elapsed:
restart all cards

Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

Security Models

Bell-LaPadula Model Enforces the confidentiality aspects of access control Simple security rule - "No read up" Star Property Rule - "No write down" Strong Star Rule - "No read up or write down" Tranquility rule- labels cannot be arbitrarily changed
Biba Model Star integrity axiom - "No write up" Simple integrity axiom - "No read down" Invocation property - "Cannot request service at a higher integrity"
Clark-Wilson Model Focuses on well formed transactions and separation of duties. Subject can only access objects through authorized programs. Separation of duties is enforced. Auditing is required
Noninterference Model Ensures any action that takes place at a higher security level does not affect or interfere with actions that take place at a lower level
Covert Channels A way for an entity to receive information in an unauthorized manner
Brewer and Nash Model (Chinese Wall) Subject can write to an object if, and only if, the subject cannot read another object that is in a different dataset
Graham-Denning Model Shows how subjects and objects should be created and deleted. Also addresses how to assign specific rights.
Harrison-Ruzzo-Ullman Model Shows how a finite set of procedures can be available to edit the access rights of a subject.
Machine State Model If a machine(system) boots in a secure state, and every transaction that occurs is secure, it must always be in a secure state and not fail open.
Information Flow Model Information flowing across boundaries need to be controlled. prevents unauthorized, insecure information flow in any direction.
Lattice Model Subjects are allowed to access an object only if the security level of the subject is equal to or greater than that of the object. Every subset has a least upper bound and a greatest lower bound.
Created by: Dks0512