Before revision: 254, 257; there's a table showing which models for computer security separates protection mechanism and security policy on p. 273 Critique However, the line between 'separation of mechanism and policy' and 'separation of protection and security' isn't clear.
After revision: 254, 257; there's a table showing which models for computer security separates protection mechanism and security policy on p. 273 Critique of nomenclatureThenecessarily line between 'separation of mechanism and policy' and 'separation of protection and security' isn't clear.