Problem 2 The Bell-LaPadula rules for MLS concern reads and writes to files. Each file F has a cl...
Problem 2 The Bell-LaPadula rules for MLS concern reads and writes to files. Each file F has a classification, which is a label L(F), each subject S has a classification, which is a label L(S); and there is an ordering "c=" on labels. This ordering is the basis for the "no read up" and "no write down" rules that define read and write operations authorized for a subject. The usual accounts of Bell-LaPadula are silent about the response generated when a read or write operation would violate the BLP access rules. For this assignment, assume that such an access attempt returns an error message "Access Denied: File unavailable". And assume that an attempt to access a file that does not exist returns the same message. a. Suppose we wish to support an additional operation b. createFile(FName, Lbl ) whose execution creates a new empty file that is named FName and has label Lbi. What, if any, rules about labels should be imposed on execution of createFile if we want to ensure that classified information doesn't leak C. Suggest error messages to be returned from invoking the createFile for the following two cases: i. the rule you suggest in (a) is not satisfied. ii. the rule you suggest in (a) is satisfied but a file with name FName already exists. Give a rationale for the wordings you propose
Solved
COMPUTER SCIENCE
1 Answer
Jack Roger
Login to view answer.