Computer Security Art and Science, 2nd Edition

Chapter 5

Confidentiality Policies

SHEPHERD: Sir, there lies such secrets in this fardel and box which none must know but the king; and which he shall know within this hour, if I may come to the speech of him.

— The Winter’s Tale, IV, iv, 785–788.

Confidentiality policies emphasize the protection of confidentiality. The importance of these policies lies in part in what they provide, and in part in their role in the development of the concept of security. This chapter explores one such policy—the Bell-LaPadula Model—and the controversy it engendered.

5.1 Goals of Confidentiality Policies

A confidentiality policy, also called an information flow policy, prevents the unauthorized disclosure of information. Unauthorized alteration of information ...