Abstract
It is shown how the Brewer-Nash Chinese wall model can be extended to a policy for handling the aggregation problem in a multilevel context. A lattice-based information flow policy that can be integrated into both the multilevel and Drewer-Nash context is derived. This information flow policy is used to develop a security policy described in terms of labeled subjects accessing labeled objects that will make it possible to construct a system that prevents users from accessing aggregates that they are not cleared to see.

This publication has 6 references indexed in Scilit: