Chapter: Security management

From Computing Project Repository

Policies define security. The complexity of modern organizations, and of their interconnections, mean that the management of policies and their composition is critical to maintaining a secure system. This chapter will present several basic models of policies, including the Bell-LaPadula model for confidentiality, the Clark-Wilson and Clinical Information System Security models for integrity, and the Chinese Wall model for conflicts of interest. It will then discuss problems arising from their composition and co-existance, and techniques for analyzing policies and translating them into an effective implementation.