Mechanism sufficiency validation by assignment
By: Lawrence J. Shirley and Roger R. Schell
Contributors: Schell, Roger R.; Naval Postgraduate School (U.S.)
Publisher: Naval Postgraduate School
Published: 1981
Place of publication: Monterey, Calif
Language: eng
Number of pages: 32
Subjects: Electronic data processing departments; Security measures
Description: This paper introduces a mathematical framework for evaluating the relationship between policies and mechanisms. An evaluation approach called the assignment technique is defined. This technique consists of establishing an assignment between the security classes of information established by policy constraints, and the protection domains, established by the properties of the mechanism. The assignment technique provides a theoretical foundation for assessing the sufficiency of an access control mechanism with respect to a well formed protection policy. Although this paper presents preliminary results of research, the proposed framework suggests a promising new approach for evaluating the protection mechanisms of existing and proposed systems.
Notes: Cover title.

"NPS-52-81-004."

"May 1981."

"Prepared for Chief of Naval Research."

Includes bibliographic references (p. 28-29).

"Approved for public release; distribution is unlimited."

Technical report; 1981.