Home › Security Architecture & Engineering

Clark-Wilson Model Explained — Security Models (Part 4)

Security Architecture & EngineeringCISSP

Clark-Wilson is a commercial integrity model — instead of mandatory security levels, it mediates every change through a controlled procedure. In Part 4 of our Security Models series, we cover the access triple, the four named pieces, the ledger example, and why it is treated as broader than Biba on integrity.

What you will learn

• Commercial integrity — mediated changes, not mandatory levels
• Well-formed transactions and separation of duties
• The access triple: user → TP → CDI
• CDI, UDI, TP, and IVP — the four named pieces
• The ledger example of a well-formed transaction
• Why Clark-Wilson is described as covering all three goals of integrity
• The exam trigger: "well-formed transaction," and why this is not a lattice or state-machine model

Part of the series: Security Models Explained — Overview (Part 1)

1. Security Models Explained — Overview (Part 1)
2. Bell-LaPadula Model Explained — Security Models (Part 2)
3. Biba Model Explained — Security Models (Part 3)
4. Clark-Wilson Model Explained — Security Models (Part 4)
5. Brewer-Nash Model Explained — Security Models (Part 5)
6. Graham-Denning Model Explained — Security Models (Part 6)
7. Harrison-Ruzzo-Ullman (HRU) Model Explained — Security Models (Part 7)
8. Take-Grant Model Explained — Security Models (Part 8)
9. Noninterference Model Explained — Security Models (Part 9)

More in Security Architecture & Engineering

• Cryptography Explained — Overview (Part 1)
• Secure Access Service Edge (SASE) Explained