Metapolicies I
- 30 June 1992
- journal article
- Published by Association for Computing Machinery (ACM) in ACM SIGSAC Review
- Vol. 10 (2-3) , 18-43
- https://doi.org/10.1145/147092.147097
Abstract
Metapolicies, or "policies about policies", may become a powerful concept for developing the large, complex, and interrelated trusted systems that military, commercial and non-profit organizations need today. Metapolicies provide a framework for clarifying policies and for successfully coordinating security policies and subpolicies.When there is only one security policy, metapolicies tend to be implicit, embedded, and fixed. When more than one security policy is involved, as in a multipolicy system, metapolicies must become explicit and flexible.This paper illustrates metapolicies implicit in simple security policies, demonstrates how metapolicies can coordinate multiple security policies, and provides a foundation for future study of metapolicies.Keywords
This publication has 4 references indexed in Scilit:
- Formal modeling in a generalized framework for access controlPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2002
- The representation of policies as system objectsPublished by Association for Computing Machinery (ACM) ,1991
- The source of authority for commercial access controlComputer, 1988
- An Analysis Of The Differences Between The Computer Security Fractices In The Military And Private SectorsPublished by Institute of Electrical and Electronics Engineers (IEEE) ,1986