Two state machine models capture the intent of mandatory confidentiality and
integrity policies respectively. The Bell and LaPadula model [7, 8] describes the
secure state of a system and includes three properties: the simple security property,
the *-property, and the discretionary property. In this chapter, only the first two
properties are of interest. If a system exhibits the simple security property, then an
entity will only be able to read information at and below its confidentiality level.
|Mobile Device Download|
|Desktop Device Download|