Integrity metrics ?

Hello,

Considering the current thread about security classifications, I
wanted to raise an issue regarding metrics for integrity.

I've seen on the list, and elsewhere, metrics with 4 or 5 levels
regarding Integrity.

Considering that security requirements (C, I and A), need, in the end,
to turn into security functionalities like access control,
authentication, signatures, etc.; there needs to be some sort of
relation between the initial requirements metrics and the technologies
for ensuring the requirements are fulfilled.

Given this, if we consider, say, confidentiality, we can map levels
with technologies, such as, for instance:
C=0 => nothing (no requirement)
C=1 => access control lists (DAC)
C=2 => ACL (MAC)
C=3 => ACL + crypto 128 bits
C=4 => ACL + crypto 256 bits

How would you do the same thing for integrity?

I came up with something such as:
I=0 => nothing
I=1 => checksum or hash (protection against errors)
I=2 => signature (protection against deliberate attacks)
and that's all. No other levels.

I can't see how other levels than these 3 (counting 0) could exist and
to what kind of technologies/practices or processes they could map.

Any thoughts, someone ?

Regards,

--
Nicolas STAMPF
http://www.ActuSecu.info