Data Protection and Security

V

Access Control

V.V

Formal Models for Access Control

Biba Model

BLP mandatory access control only protects confidentiality. Biba is a model due to Ken Biba which is often referred to as "Bell-LaPadula upside down." It deals with integrity alone and ignores confidentiality entirely. The key observation is that confidentiality and integrity are in some sense dual concepts. "Clean" high-integrity subjects can write into low integrity objects, but subjects that read "dirty" low level objects are not allowed to modify high-integrity objects.