Security Model

It is the Clark-Wilson model.

The Clark-Wilson model enforces the three goals of integrity by using access triple (subject, software [TP], and object), separation of duties, and auditing.

The Clark-Wilson model uses the following elements:

• Users Active agents
• Transformation procedures (TPs) Programmed abstract operations, such as read, write, and modify
• Constrained data items (CDIs) Can be manipulated only by TPs
• Unconstrained data items (UDIs) Can be manipulated by users via primitive read and write operations
• Integrity verification procedures (IVPs) Check the consistency of CDIs with external reality

This model enforces integrity by using well-formed transactions (through access triple) and separation of duties. When an application uses the Clark-Wilson model, it separates data into one subset that needs to be highly protected, which is referred to as a constrained data item (CDI), and another subset that does not require a high level of protection, which is called an unconstrained data item (UDI). Users cannot modify critical data (CDI) directly. Instead, the subject (user) must be authenticated to a piece of software, and the software procedures (TPs) will carry out the operations on behalf of the user.

For example, when John needs to update information held within her company’s database, he will not be allowed to do so without a piece of software controlling these activities. First, John must authenticate to a program, which is acting as a front-end for the database, and then the program will control what John can and cannot do to the information in the database.

This is referred to as access triple: subject (user), program (TP), and object (CDI). A user cannot modify CDI without using a TP.

Regarding the Separation of duty (SoD), the Clark-Wilson security model uses division of operations into different parts and requires different users to perform each part. This principle is referred as Separation of Duties (SoD). The Clark-Wilson model outlines how to incorporate separation of duties into the architecture of an application.

In a real world scenario, if a bank teller needs to withdraw $100,000, the bank’s application may require a supervisor to log in and authenticate the transaction. This is a countermeasure against potential fraudulent activities. The model provides the rules that the system designers and developers must follow to properly implement and enforce separation of duties through software procedures.

Laptop USB C Docking Station Dual Monitor 14 in 1 Triple Display USB C Hub for MacBook/Dell/HP/Lenovo Dual HDMI 4K, DP 8K, PD Charger, Gigabit Ethernet, 6 USB Ports, SD/TF Card Reader, Mic/Audio

$69.99 (as of 02/07/2024 16:04 GMT -04:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

【14 in 1 USB C Docking Station】Plug and play, Easy to Use. NO additional driver required.This USB-C docking station dual monitor easily convert your laptop’s USB-C/thunderbolt 3/Type C Port into 14 Ports:Dual Monitor 4K HDMI, DP Display port（8K@30Hz）... read more

PC Gaming Headset Headphone Hook Holder Hanger Mount, Headphones Stand with Adjustable & Rotating Arm Clamp, Under Desk Design, Universal Fit, Built in Cable Clip Organizer EURPMASK

(27325)

$12.99 (as of 02/07/2024 16:14 GMT -04:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

🎧【Clamp-on Headphone Stand】The E-Hold Series headphone holder fits desks from 0.31 inch to 1.57 inch thick, making it a versatile choice for most setups. The spring clamp is a breeze to remove and reattach. No glue, no mess. It blends seamlessly into... read more

Laptop Cleaning Kit Keyboard Cleaner, Keyboard Cleaning Kit Electronics Cleaning Tool for MacBook iPad Phone iPhone Pro, Brush Tool for Tablet, Computer, PC, TV Camera Lens Computer Vacuum Keyboard

(2045)

$16.98 (as of 02/07/2024 16:14 GMT -04:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

DEEP CLEAN YOUR DEVICE The electronics cleaner kit can effectively deep clean all your electronic devices such as mobile phones, tablets, TVs, etc. It comes with retractable large keyboard brush, polishing cleaning cloth X 2, keycap puller, metal pen... read more

HUANUO 2 Tier Monitor Stand, Metal Monitor Riser with Drawer, Desk Organizer, Monitor Stand with Storage, Desktop Computer Stand for PC, Laptop, Printer

$29.99 (as of 02/07/2024 16:32 GMT -04:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

【Sturdy Desk Stand with Strengthened Construction】- The "H" shape construction increases the duration. This monitor stand easily hold monitors, printers up to 33lbs. Never worry about the drawer will not be easy to open. 【Ergonomic Monitor Stand Rise... read more