The Computer Security Policy Model the Orange Book is based on is which of the following?

A.
Bell-LaPadula

B.
Data Encryption Standard

C.
Kerberos

D.
Tempest

Explanation:
Following the publication of the Anderson report, considerable research was initiated into formal
models of security policy requirements and of the mechanisms that would implement and enforce
those policy models as a security kernel. Prominent among these efforts was the ESD-sponsored
development of the Bell and LaPadula model, an abstract formal treatment of DoD security policy.[2]
Using mathematics and set theory, the model precisely defines the notion of secure state,
fundamental modes of access, and the rules for granting subjects specific modes of access to
objects. Finally, a theorem is proven to demonstrate that the rules are security-preserving
operations, so that the application of any sequence of the rules to a system that is in a secure state
will result in the system entering a new state that is also secure. This theorem is known as the Basic
Security Theorem.