Title :
Separation of duty using high water marks
Author_Institution :
ORA Corp., Cambridge, MA, USA
Abstract :
The paper describes an approach to specifying and enforcing separation of duty policies using information flow controls. Separation flow policies are based on the notion that sufficient information must be present before it may flow to a receiver. These policies also have natural integrity duals. A high water mark mechanism is described that can enforce these policies
Keywords :
data integrity; formal specification; security of data; formal specification; high water marks; information flow controls; integrity duals; separation flow policies; separation of duty policies; system integrity; Data security; Databases; Information security; Lattices;
Conference_Titel :
Computer Security Foundations Workshop IV, 1991. Proceedings
Conference_Location :
Franconia, NH
Print_ISBN :
0-8186-2215-6
DOI :
10.1109/CSFW.1991.151572
