1. Assume two employees Bob and Carol in the context of the Chinese Wall model.

Question

1. Assume two employees Bob and Carol in the context of the Chinese Wall model. Consider two conflict of interest classes CO -X, Y} and CO12 U, V). Let CDX, CDY, CDU, and CDV be the company data sets of companies X, Y, U, and V, respectively. We want to provide both read/write access to CDX and CDY, and read-only access to CDU and CDV Show all the possible assignments of Bob and Carol to these CDs that are allowed by the Chinese Wall policy. Note that they may not be able to cover all the CDs -for that you can assume there are others who can take on the assignment. [15 pt.]

Explanation / Answer

Theorem 1-Once a subject has accessed an object, the only other objects accessible by that subject lie within the same company dataset or within a different conflict of interest class.

Theorem 2-A subject can at most have access to one company dataset in each conflict of interest class.

Theorem 3-If for some conflict of interest class X there are Xy company datasets, then the minimum number of subjects which will allow every object to be accessed by at least one subject is y.

So according to the above theorems, the possible assignments of Bob and Carol are as follows:

For conflict of interest class COI1={X,Y}, Bob and Carol can access either company dataset CDX or CDY and for conflict of interest class COI2={U,V}, Bob and Carol can access either company dataset CDU or CDV. Therefore, both Bob and Carol can access one read/write company dataset and one read only company dataset, this is because the read/write permission is granted to dataset of the same conflict of interest and read only permission is granted to another conflict of interest dataset.

Bob={CDX,CDU}

or {CDX,CDV}

or {CDY,CDU}

or {CDY,CDV}

and at the same time,

Carol={CDY,CDV}

or {CDY,CDU}

or {CDX,CDV}

or{CDX,CDU}

Related Questions

Navigate

• Browse (All)
• Browse 1
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.