Chapter 7 Hybrid Policies.ppt

November 1, 2004 Introduction to Computer Security Chapter 7: Hybrid Policies Overview Chinese Wall Model Clinical Information Systems Security Policy ORCON RBAC Overview Chinese Wall Model Focuses on conflict of interest CISS Policy Combines integrity and confidentiality ORCON Combines mandatory, discretionary access controls RBAC Base controls on job function Chinese Wall Model Problem: Tony advises American Bank about investments He is asked to advise Toyland Bank about investments Conflict of interest to accept, because his advice for either bank would affect his advice to the other bank Organization Organize entities into “conflict of interest” classes Control subject accesses to each class Control writing to all classes to ensure information is not passed along in violation of rules Allow sanitized data to be viewed by everyone Definitions Objects: items of information related to a company Company dataset CD : contains objects related to a single company Written CD O Conflict of interest class COI : contains datasets of companies in competition Written COI O Assume: each object belongs to exactly one COI class Example Temporal Element If Anthony reads any CD in a COI, he can never read another CD in that COI Possible that information learned earlier may allow him to make decisions later Let PR S be set of objects that S has already read CW-Simple Security Condition s can read o iff either condition holds: There is an o? such that s has accessed o? and CD o? CD o Meaning s has read something in o’s dataset For all o? ? O, o? ? PR s ? COI o? ≠ COI o Meaning s has not read any objects in o’s conflict of interest class Ignores sanitized data see below Initially, PR s ?, so initial read request granted Sanitization Public information may belong to a CD As is publicly available, no conflicts of interest arise So, should not affect ability of analysts to read Typically, all sensitive data removed from such information before it is released publicl