IMPROVING ACCESS CONTROL MODELS FOR CONFIDENTIAL DOCUMENTS IN MILITARY INFORMATION SYSTEMS
Abstract
Classified document systems in defence organisations still rely largely on lattice-based mandatory access control (MAC) and role-based access control (RBAC). These models decide on static labels and ignore need-to-know, the state of the requesting device, and behavioural risk, which leaves them exposed to credential compromise, insider misuse and bulk aggregation. Objective. To design and evaluate a hybrid access-control model for confidential documents that combines a Bell–LaPadula lattice, attribute-based access control (ABAC), context and risk evaluation, and a two-person rule for the highest classification. Methods. The model was specified formally and compared with MAC, RBAC and static ABAC in a Monte Carlo simulation of 120,000 requests per run (10 runs) over a synthetic population of 1,500 subjects and 6,000 documents, with four attack classes. Results. In this synthetic setting the hybrid model granted 0.94% of malicious requests, against 75.11% for MAC, 81.83% for RBAC and 39.93% for static ABAC, while denying 2.59% of legitimate requests. Conclusions. Adding contextual and risk-adaptive conditions to a lattice-plus-ABAC core removes most residual attack paths at a modest availability cost. Because the evaluation is simulated, the figures show the direction and approximate size of the effect and must be confirmed with operational data.References
[1] Bell DE, LaPadula LJ. Secure computer systems: mathematical foundations. Technical Report MTR-2547, Vol. I. Bedford (MA): The MITRE Corporation; 1973.
[2] Biba KJ. Integrity considerations for secure computer systems. Technical Report MTR-3153. Bedford (MA): The MITRE Corporation; 1977.
[3] Denning DE. A lattice model of secure information flow. Communications of the ACM. 1976;19(5):236–243.
[4] Clark DD, Wilson DR. A comparison of commercial and military computer security policies. In: Proceedings of the IEEE Symposium on Security and Privacy; 1987. p. 184–194.
[5] Brewer DFC, Nash MJ. The Chinese Wall security policy. In: Proceedings of the IEEE Symposium on Security and Privacy; 1989. p. 206–214.
[6] Sandhu RS, Coyne EJ, Feinstein HL, Youman CE. Role-based access control models. IEEE Computer. 1996;29(2):38–47.
[7] Ferraiolo DF, Sandhu R, Gavrila S, Kuhn DR, Chandramouli R. Proposed NIST standard for role-based access control. ACM Transactions on Information and System Security. 2001;4(3):224–274.
[8] Hu VC, Ferraiolo D, Kuhn R, Schnitzer A, Sandlin K, Miller R, Scarfone K. Guide to Attribute Based Access Control (ABAC) definition and considerations. NIST Special Publication 800-162. Gaithersburg (MD): National Institute of Standards and Technology; 2014. doi:10.6028/NIST.SP.800-162.
[9] Rose S, Borchert O, Mitchell S, Connelly S. Zero Trust Architecture. NIST Special Publication 800-207. Gaithersburg (MD): National Institute of Standards and Technology; 2020. doi:10.6028/NIST.SP.800-207.
[10] Servos D, Osborn SL. Current research and open problems in attribute-based access control. ACM Computing Surveys. 2017;49(4):Article 65.
[11] Jin X, Krishnan R, Sandhu R. A unified attribute-based access control model covering DAC, MAC and RBAC. In: Data and Applications Security and Privacy XXVI (DBSec 2012). Lecture Notes in Computer Science, vol. 7371. Berlin: Springer; 2012. p. 41–55.
[12] Park J, Sandhu R. The UCON_ABC usage control model. ACM Transactions on Information and System Security. 2004;7(1):128–174.
[13] Saltzer JH, Schroeder MD. The protection of information in computer systems. Proceedings of the IEEE. 1975;63(9):1278–1308.
[14] Harrison MA, Ruzzo WL, Ullman JD. Protection in operating systems. Communications of the ACM. 1976;19(8):461–471.
[15] Lampson BW. Protection. ACM SIGOPS Operating Systems Review. 1974;8(1):18–24.
[16] Joint Task Force. Security and privacy controls for information systems and organizations. NIST Special Publication 800-53, Revision 5. Gaithersburg (MD): National Institute of Standards and Technology; 2020.
[17] U.S. Department of Defense. Zero Trust Strategy. Washington (DC): Department of Defense; November 2022.
[18] Bertino E, Sandhu R. Database security—concepts, approaches, and challenges. IEEE Transactions on Dependable and Secure Computing. 2005;2(1):2–19.
[19] Anderson RJ. Security Engineering: A Guide to Building Dependable Distributed Systems. 3rd ed. Indianapolis: Wiley; 2020.
[20] Kuhn DR, Coyne EJ, Weil TR. Adding attributes to role-based access control. IEEE Computer. 2010;43(6):79–81.
