课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

Security models

Security models

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

Security models

“

- [Instructor] Security models provide a theoretical way of describing the security controls implemented within a system. Let's take a look at three core topics in this area. The concept of multi-level security, the Bell-LaPadula Security Model, and the Biba Integrity Model. Both the Bell-LaPadula and Biba Models are designed to provide security within the context of multi-level security. Now, that simply means that a single computing system might be used to store, process, and transmit information of different classification levels, and the users of the system might have different security clearances. For example, a system might handle confidential, secret, and top-secret information even though some users of the system don't have a top-secret security clearance. The Bell-LaPadula Model is designed to ensure that users of multi-level systems don't get access to information higher than their security clearance level. It has two rules that it uses to enforce confidentiality. Now first,…

内容