Everything about Separation Of Protection And Security totally explained
In
computer sciences the
separation of protection and security is a
design choice. Wulf et al identified protection as a
mechanism and security as a
policy, therefore making the protection-security distinction as a particular case of the
separation of mechanism and policy principle.
Overview
The adoption of this distinction in a
computer architecture, usually means that protection is provided as a
fault tolerance mechanism by
hardware/
firmware and
kernel, whereas the
operating system and
applications implement their security policies. In this design, security policies rely therefore on the protection mechanisms and on additional
cryptography techniques.
The major hardware approach for security or protection is the use of
hierarchical protection domains. Prominent example of this approach is
ring architecture with "
supervisor mode" and "user mode"). Such approach adopts a policy already at the lower levels (hw/firmware/kernel), restricting the rest of the system to rely on it. Therefore, the choice to distinguish between protection and security in the overall architecture design implies rejection of the hierarchical approach in favour of another one, the
capability-based addressing.
Design models with the separation
The models with the protection and security separation are:
access matrix,
UCLA Data Secure Unix,
take-grant and
filter.
Design models without the separation
The models without such separation are:
high-water mark,
Bell and LaPadula (original and revisited),
information flow,
strong dependency and
constraints.
Further Information
Get more info on 'Separation Of Protection And Security'.
|
External Link Exchanges
Do you know how hard it is to get a link from a large encyclopaedia? Well we're different and will prove it. To get a link from us just add the following HTML to your site on a relevant page:
<a href="http://separation_of_protection_and_security.totallyexplained.com">Separation of protection and security Totally Explained</a>
Then simply click through this link from your web page. Our crawlers will verify your link, extract the title of your web page and instantly add a link back to it. If you like you can remove the words Totally Explained and embed the link in article text.
As long as your link remains in place, we'll keep our link to you right here. Please play fair - our crawlers are watching. Your site must be closely related to this one's topic. Any kind of spamming, dubious practises or removing the link will result in your link from us being dropped and, potentially, your whole site being banned. |
