With the BLP model, access permissions are defined through:
A.
Filter rules
B.
Security labels
C.
Access Control matrix
D.
Profiles
Explanation:
Bell-LaPadula is a state machine model capturing confidentiality aspects of access control. Access
permissions are defined through an Access Control matrix and through a partial ordering of security
levels. Security policies prevent information flowing downwards from a high security level to a low
security level. BLP only considers the information flow that occurs when a subject observes or alters
an object.
Access control matrix sets rules between subject and objects however BLP’s rules are predefined and will be applied based on security labels so I think B is the correct answer.
Correct me if I am wrong
0
0