CIS 502 Discussion - Security Models

CIS 502 Discussion

Security Models

1. Write a one to two (1-2) page paper in which you:

2. Use at least three (3) quality resources in this assignment.

Note: Wikipedia and similar Websites do not qualify as quality resources. 

3. Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format.  

 

In information security, models provide a way to formalize security policies. Such models can be abstract or intuitive. All models are intended to provide an explicit set of rules that a computer can follow to implement the fundamental security concepts, processes, and procedures that make up a security policy. The models offer a way to deepen your understanding of how a computer operations system should be designed and developed to support a specific security policy. No system can be totally secure; security professionals have several security models to consider.  

Let’s say you work for the following types of industry: 

• Government 

From the list below, select a model and summarize the model as you understand it. State why you might use this model in your job. Include at least one advantage and disadvantage of the model you’ve chosen. Include a real-life example of the model in use.  

 

Make sure to include any special or unique security feature for the model.   

 

• Trusted computing base 

• State machine model 

• Information flow model 

• Noninterference model 

• Take-Grant model 

• Access control matrix 

• Bell-LaPadula model 

• Biba model 

• Clark-Wilson model 

• Brewer and Nash model (also known as the Chinese wall) 

• Goguen-Meseguer model 

• Sutherland model 

• Graham-Denning model