Chapter 4. Security Policies

 

PORTIA: Of a strange nature is the suit you follow;Yet in such rule that the Venetian lawCannot impugn you as you do proceed.[To Antonio.] You stand within his danger, do you not?

 
 --The Merchant of Venice, IV, i, 177–180.

A security policy defines “secure” for a system or a set of systems. Security policies can be informal or highly mathematical in nature. After defining a security policy precisely, we expand on the nature of “trust” and its relationship to security policies. We also discuss different types of policy models.

Security Policies

Consider a computer system to be a finite-state automaton with a set of transition functions that change state. Then:

  • Definition 4–1. A security policy is a statement that partitions ...

Get Computer Security: Art and Science now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.