Reasoning About Security Models
Type
Article
Year
1987
Authors
McLean, J.
Identifiers
Print ISBN: 0-8186-0771-8
Print ISSN: 1540-7993
Publication
1987 IEEE Symposium on Security and Privacy
Pages
123-131
Abstract
A method for evaluating security models is developed and applied to the model of Bell and LaPadula. The method shows the inadequacy of the Bell and LaPadula model, in particular, and the impossibility of any adequate definition of a secure system based solely on the notion of a secure state. The implications for the fruitfulness of seeking a global definition of a secure system and for the state of foundational research in computer security, in general, is discussed.
(https://open-measure.atlassian.net/wiki/pages/resumedraft.action?draftId=1237614781, p. 123)
Links
Citation
McLean, J., 1987. Reasoning About Security Models. 1987 IEEE Symposium on Security and Privacy 11. https://doi.org/10.1109/SP.1987.10020