404432
Description
Mind Map by Craig Parker, updated more than 1 year ago
|
Created by Craig Parker
over 10 years ago
|
|
U4. Further Aspects of BLP
- Covert Channel
- A communications channel that allows transfer of information
in a manner that violates the system’s security policy
- Storage Channel
- Information is leaked by operating
system messages, file names, etc
- The existence of a document called 'topsecretplansforinvasionofIguanaland .doc'
conveys quite a lot of information, even if you cannot actually read the document!
Even a simple 'access denied' message can give you some information.
- Increases in amount of traffic on communications
channels can be a sign of activity. Traffic flow
analysis is a useful weapon
- The existence of a document called 'topsecretplansforinvasionofIguanaland .doc'
conveys quite a lot of information, even if you cannot actually read the document!
Even a simple 'access denied' message can give you some information.
- Information is leaked by operating
system messages, file names, etc
- Timing Channel
- Information is leaked by observing system performance
- Information is leaked by observing system performance
- Storage Channel
- covert channels are not
detected by BLP modelling.
- even if BLP correctly models the stated security policy (in
terms of 'no read-up, no write-down') there may well be ways,
such as covert channels, by which the policy may be violated
- even if BLP correctly models the stated security policy (in
terms of 'no read-up, no write-down') there may well be ways,
such as covert channels, by which the policy may be violated
- A communications channel that allows transfer of information
in a manner that violates the system’s security policy
- Limitations
- Confidentiality
- BLP relates only to confidentiality
- However, there are many cases where a
security policy relates to integrity. IE Biba
- However, there are many cases where a
security policy relates to integrity. IE Biba
- BLP relates only to confidentiality
- Tranquility
- BLP assumes that security levels are static
- Subjects access / document
classification both subject to change
- Subjects access / document
classification both subject to change
- BLP assumes that security levels are static
- Covert channels
- Sometimes, it is not sufficient to hide only the contents
of objects. Their very existence may need to be hidden
- Sometimes, it is not sufficient to hide only the contents
of objects. Their very existence may need to be hidden
- Confidentiality
Want to create your own Mind Maps for free with GoConqr? Learn more.