Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Does the Biba integrity model (No write-up, no read-down) necessarily conflict with the Bell-Lapadula security model (No write-down, no read-up)? Or can they both coexist in a single system?

share|improve this question
I'm not sure if this is the place to ask such theoretical questions... You may want to give a try. – Sasha Chedygov Dec 17 '10 at 7:19
@musicfreak: CSTheory is for research-level questions. IT Security might be a better fit. – Gilles Dec 17 '10 at 23:44
@Gilles: Thanks, I wasn't really sure what to suggest myself. :) – Sasha Chedygov Dec 18 '10 at 9:39
up vote 0 down vote accepted

They don't absolutely conflict, but it puts severe limitations on access. With both of these at the same time you can operate on the horizontal or a per issue access...but this is a pain to implement. I'm not sure why you are asking. The models are typically not combined in application.

It would be the equivalent of having every communication as eyes only with a notes section at the bottom, and you only hand it off to specifically authorized people...does that make sense?

share|improve this answer

I have seen an environment set up to effectively work like this, but it was for a specific reason. It was an airgapped network with access only for 6 people who had an identical role. All data in the network was there from the beginning of the project until the end, and then the results were reclassified.

Don't think you'd want to do this in real life, as typically you do want information to move from one area to another.

For questions like this I would suggest posting on as the range of experienced folks over there could provide a few viewpoints.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.