Question

A financial services firm deploys an integrity-focused security model to protect a critical ledger system. A batch process running at the 'Medium Integrity' level attempts to write records into a data store classified at 'High Integrity.' Under the Biba model, how should the system respond to this write attempt?

Accepted Answer

Deny the write, because a subject cannot write to an object of higher integrity than itself

Answer

Allow the write, because a subject may write to any object at or below its own integrity level

Answer

Allow the write, but log it for later review by the integrity verification process

Answer

Deny the write, because a subject cannot read data of lower integrity than itself