Brewer and Nash model

The Brewer and Nash model was constructed to provide information security access controls that can change dynamically. This security model, also known as the Chinese wall model, was designed to provide controls that mitigate conflict of interest in commercial organizations and is built upon an information flow model. In the Brewer and Nash model, no information can flow between the subjects and objects in a way that would create a conflict of interest.

This model is commonly used by consulting and accounting firms. For example, once a consultant accesses data belonging to Acme Ltd, a consulting client, they may no longer access data to any of Acme's competitors. In this model, the same consulting firm can have clients that are competing with Acme Ltd while advising Acme Ltd. This model uses the principle of data isolation within each conflict class of data to keep users out of potential conflict of interest situations. Because company relationships change all the time, dynamic and up-to-date updates to members and definitions for conflict classes are important.

See also

• Bell–LaPadula model
• Biba model
• Clark–Wilson model
• Graham–Denning model

References

• Harris, Shon, All-in-one CISSP Exam Guide, Third Edition, McGraw Hill Osborne, Emeryville, California, 2005.
• Chapple, Mike, et al, Certified Information System Security Professional - Official Study Guide, Eighth Edition, Sybex, John Wiley & Sons, Indiana, 2018.

External links

• Dr. David F.C. Brewer and Dr. Michael J. Nash (1989). "The Chinese Wall Security Policy". Proceedings of IEEE Symposium on Security and Privacy, 1989, Pp. 206-214 (IEEE). http://www.cs.purdue.edu/homes/ninghui/readings/AccessControl/brewer_nash_89.pdf.