ISC Exam Questions

What Access Control model was developed to deal mainly with information flow in computer systems?

What Access Control model was developed to deal mainly with information flow in computer
systems?

A.
Lattice Based

B.
Integrity Based

C.
Flow Based

D.
Area Based

Explanation:
The Lattice Based Access Control model was developed to deal mainly with information
flow in computer systems. Information flow is clearly central to confidentiality but to
some extent it also applies to integrity. The basic work in this area was done around
1970 and was driven mostly by the defense sector. Information flow in computer systems
is concerned with flow from one security class (also called security label) to another.
These controls are applied to objects. An object is a container of information, and an
object can be a directory or file.