Which security model introduces access to objects only through programs?

A.
The Biba model

B.
The Bell-LaPadula model

C.
The Clark-Wilson model

D.
The information flow model

Explanation:
“The Clark-Wilson model is also an integrity-protecting model. The Clark-Wilson model was
developed after Biba and approaches integrity protection from a different perspective.

Rather than employing a lattice structure, it uses a three-part relationship of subject/program/object
known as a triple. Subjects do not have direct access to objects. Objects can be access only through
programs.” Pg 347 Tittel: CISSP Study Guide