Page 31

INFO5301 Information Security Management

Security levels are the same. server_room.txt ’s classification [OPR] is a subset of Bob’s

categories [FIN,OPR]. Therefore, Bob dominates server_room.txt .

However, according to “No write Down" rule in Bell-La Padula model, Bob cannot write to

server_room.txt , but Bob can read server_room.txt .

Discussion: 10 mins

Information Security Management Page 5of 5