A defense contractor is building a system that will store design data for classified weapons. Engineers must ensure that a user cleared for “Secret” cannot modify “Top Secret” design files, and that data from lower classifications can never compromise higher-level data integrity.
Which information flow model BEST satisfies these requirements?
A. Bell–LaPadula Model
B. Biba Integrity Model
C. Clark–Wilson Model
D. Brewer–Nash (Chinese Wall) Model