# A Proposal for a Zero-Trust-Based Multi-Level Security Model and Its Security Controls
## 4 Proposed Security Controls for the Zero-Trust-Based MLS Model and Its Robustness
### Security Controls
\begin{table}
\begin{tabular}{l c c c c} \hline \hline \multicolumn{1}{c}{**Control**} & \multicolumn{2}{c}{**Specific Controls**} & \multicolumn{1}{c}{**C**} & \multicolumn{1}{c}{**S**} & \multicolumn{1}{c}{**O**} \\ \hline AC-1 & AC-1-1: Dual Authorisation & \(\surd\) & \(\surd\) & \(\surd\) \\ Access Enforcement & AC-1-2: Assert and Enforce Application Access & \(\surd\) & \(\surd\) & \(\surd\) \\ (AC-3) & AC-1-3: Discretionary and Mandatory Access Control & \(\surd\) & \(\surd\) & \(\surd\) \\ \hline \multicolumn{1}{c}{} & AC-2-1: Automated System Account Management & \(\surd\) & \(\surd\) \\ AC-2-2: Disable Accounts & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-2 & AC-2-3: Automated Audit Action & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-2 & AC-2-4: Inactivity Logout & \(\surd\) & \(\surd\) & \(\surd\) \\ Account Management & AC-2-5: Dynamic Privilege Management & \(\surd\) & \(\surd\) & \(\surd\) \\ (AC-2) & AC-2-6: Privilegeal User Accounts & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-2-7: Dynamic Account Management & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-2-8: Account Monitoring for Atypical Usage & \(\surd\) & \(\surd\) & \(\surd\) \\ \hline \multicolumn{1}{c}{} & AC-3-1: Object Security and Privacy Attributes & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-2: Dynamic Information Flow Control & \(\surd\) & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3:3: Flow Control of Encrypted Information & \(\surd\) & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-4: One-Way Flow Mechanism & \(\surd\) & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-5: Security and Privacy Policy Filters & \(\surd\) & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-6: Human Reviews & \(\surd\) & \(\surd\) & \(\surd\) & \(\surd\) \\ Information Flow Enforcement & AC-3-7: Data Type Identifiers & \(\surd\) & \(\surd\) & \(\surd\) \\ (AC-4) & AC-3-8: Detection of Unsanctioned Information & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-9: Approved Solutions & & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-10: Physical or Logical Separation of Information Flows & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-11: Modify Non-Releasable Information & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-12: Data Santistation & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-3-13: Filter Orchestration Engines & \(\surd\) & \(\surd\) & \(\surd\) \\ \hline AC-10 & & & & \\ Access Control Decisions & AC-10-1: No User or Process Identity & \(\surd\) & \(\surd\) & \(\surd\) \\ (AC-24) & & & & \\ \hline AC-11 & & & & \\ Separation of duties & AC-11: Separation of Dutes & \(\surd\) & \(\surd\) & \(\surd\) \\ (AC-5) & & & & \\ \hline \multicolumn{1}{c}{} & AC-12-1 Authorise Access to Security Functions & \(\surd\) & \(\surd\) & \\ AC-12-2: Non-Privileged Access for Non-security Functions & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-12-3: Network Access to Privileged Commands & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-12-4: Separate Processing Domains & \(\surd\) & \(\surd\) & \\ AC-12 & & & & \\ AC-12-5: Privileged Accounts & \(\surd\) & \(\surd\) & \(\surd\) \\ Least Privilege & AC-12-6: Privileged Access by Non-Organisational Users & \(\surd\) & \(\surd\) & \\ (AC-6) & AC-12-7: Review of User Privileges & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-12-8: Privilege Levels for Code Execution & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-12-9: Log Use of Privileged Functions & \(\surd\) & \(\surd\) & \(\surd\) \\ AC-12-10: Prohibit Non-Privileged Users from Executing Privileged & \(\surd\) & \(\surd\) & \(\surd\) \\ Functions & & & \\ \hline \hline \end{tabular}
\end{table}