Security Models and Policies

[aahnik]

References

• https://www.geeksforgeeks.org/introduction-to-classic-security-models/
• Chinese Wall Paper by Brewer & Nash
• A Master's thesis on Chinese wall
• ABAC
• RBAC

More References

• The Bell and La Padula Security Model
• On The Modeling of Bell-LaPadula Security Policies Using RBAC

How we are implementing

if they ask, how chinese wall security policy is implemented in our fsd project, we will say, that each user's space is a conflict of interest class : one user cannot access the space of another user

we have RBAC thru superuser/admin/premium/free where each role has defined access

and have ABAC by tracking viewers/editors of individual files