Least privilege and more [computer security]
F.B. Schneider · IEEE Security & Privacy · 2003
With new methods for enforcing security policies comes the opportunity to formulate application-specific policies. But leveraging that flexibility might prove a difficult problem, not only in practice, but also in theory.