Bell-Lapadula vs. Biba, Key Elements

Here are some tips for remembering details about the Bell-Lapadula and Biba security models. The B-L model is used to provide confidentiality, whereas the Biba model is used to provide integrity. When you see the word "simple", it applies to reading. If the rules uses * or "star", the rule is talking about writing.

In summary:

  • Bell-Lapadula - CONFIDENTIALITY
  • Biba - INTEGRITY
  • "simple" = reading
  • * or "star" = writing

Biba Security Model Main Rules

1. * - Integrity Axiom - A subject cannot write data to an object at a higher integrity level. This is known as "No write up".

2. Simple Integrity Axiom - A subject cannot read data from a lower integrity level. This is known as "No read down".

Bell-LaPadula Security Model Main Rules

1. Simple Security Rule - A subject cannot read data within an object that resides at a higher security level. This is known as "No read up".

2. * - Property Rule - A subject cannot write to an object at a lower security level. This is known as "No write down".

3. Strong Star Property Rule - For a subject to be able to read and write to an object, the subject's clearance and the object's classification must be equal.

Six Major VoIP Protocols

H.323 - ITU standard protocol for interactive conferencing

MGCP (Media Gateway Control Protocol) - a method of PSTN gateway control or thin device control

Megaco/H.248 - joint IETF/ITU standard protocol that provides full call control intelligence

SIP (Session Initiation Protocol) - a protocol that specifies commands and responses to set up and tear down calls (end-to-end call signaling); text based

RTP (Real-time Transport Protocol) - an IETF media streaming protocol

RTCP (Read-time Transport Control Protocol) - provies out-of-band control information for an RTP flow

7 Layers of OSI Model

There are 7 layers of the OSI Model. I remember them using the phrase "All People Seem To Need Data Processing". There are others. Freel free to comment on them. Here they are:

Application
Presentation
Session
Transport
Network
Data-Link
Physical