Enforceable security policies
Fred B. Schneider · ACM Transactions on Information and System Security · 2000
A precise characterization is given for the class of security policies enforceable with mechanisms that work by monitoring system execution, and automata are introduced for specifying exactly that class of security policies. Techniques to enforce security policies specified by such automata are also discussed.