January 25, 2019 Outline

Reading: text, §5.1–5.3

  1. Instantiation of Bell-LaPadula Model: Trusted Solaris
  2. Bell-LaPadula: formal model
    1. Elements of system: siS subjects, oiO objects
    2. State space V = B × M × F × H where:
      B set of current accesses (i.e., access modes each subject has currently to each object);
      M access permission matrix;
      F consists of 3 functions: fs is security level associated with each subject, fo security level associated with each object, and fc current security level for each subject;
      H hierarchy of system objects, functions h: OP(O) with two properties:
      1. If oioj, then h(oi) ∩ h(oi) = ∅
      2. There is no set { o1, …, ok } ⊆ O such that for each i, oi+1h(oi) and ok+1 = o1
    3. Set of requests is R
    4. Set of decisions is D
    5. W = R × D × V × V is motion from one state to another
    6. System Σ(R, D, W, z0) ⊆ X × Y × Z such that (x, y, z) ∈ Σ(R, D, W, z0) iff (xt, yt, zt, zt−1) ∈ W for each tT; latter is an action of system

UC Davis seal
Matt Bishop
Office: 2209 Watershed Science
Phone: +1 (530) 752-8060
Email: mabishop@ucdavis.edu
You can also obtain a PDF version of this.
Version of January 25, 2019 at 3:51PM