Computer Security: Art and Science

Chapter 8. Noninterference and Policy Composition

	GONERIL: Combine together 'gainst the enemy,For those domestic poor particularsAre not to question here.
	--The Tragedy of King Lear, V, i, 29–31.

Organizations usually have multiple policy making units. If two different branches of an organization have conflicting policy needs, or even different policy needs, what policy should the organization as a whole adopt? If one of the policies requires six levels of security, and another three, how can they be composed into a coherent whole—or can they? The answers to these general questions come from information flow models that abstract the essence of security policies. Introduced in 1982, these models focus on each process' view of the system to ensure ...