Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Reasoning About Security Models

Type

Article

Year

1987

Authors

McLean, J.

Identifiers

Publication

1987 IEEE Symposium on Security and Privacy

Pages

123-131

Abstract

A method for evaluating security models is developed and applied to the model of Bell and LaPadula. The method shows the inadequacy of the Bell and LaPadula model, in particular, and the impossibility of any adequate definition of a secure system based solely on the notion of a secure state. The implications for the fruitfulness of seeking a global definition of a secure system and for the state of foundational research in computer security, in general, is discussed.

(https://open-measure.atlassian.net/wiki/pages/resumedraft.action?draftId=1237614781, p. 123)

Citation

McLean, J., 1987. Reasoning About Security Models. 1987 IEEE Symposium on Security and Privacy 11. https://doi.org/10.1109/SP.1987.10020