Data Protection and Security

V

Access Control

V.V

Formal Models for Access Control

Forming a lattice model and determining which subjects and objects belong to which level is the first step towards building a formal security policy. The next step should be to define the security rules to control information flow between the security levels. Next, we will see two well-known examples of policy models: