Which security model introduces access to objects only through programs?

A.
The Biba model

B.
The Bell-LaPadula model

C.
The Clark-Wilson model

D.
The information flow model

Explanation:
“The Clark-Wilson model is also an integrity-protecting model. The Clark-Wilson
model was developed after Biba and approaches integrity protection from a different perspective.
Rather than employing a lattice structure, it uses a three-part relationship of
subject/program/object known as a triple. Subjects do not have direct access to objects. Objects
can be access only through programs.” Pg 347 Tittel: CISSP Study Guide