Which integrity model defines a constrained data item, an integrity verification procedure and a transformation procedure?

Which integrity model defines a constrained data item, an integrity verification procedure and a transformation procedure?
A .  The Take-Grant model
B .  The Biba integrity model
C .  The Clark Wilson integrity model
D .  The Bell-LaPadula integrity model

View Answer

Answer: C

Explanation: The Clark Wilson integrity model addresses the three following integrity goals: 1) data is protected from modification by unauthorized users; 2) data is protected from unauthorized modification by authorized users; and 3) data is internally and externally consistent. It also defines a Constrained Data Item (CDI), an Integrity Verification Procedure (IVP), a Transformation Procedure (TP) and an Unconstrained Data item. The Bell-LaPadula and Take-Grant models are not integrity models. Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 5: Security Architecture and Models (page 205).