Integrating formalism and pragmatism
Ruth Nelson · 1997
Two major schools have dominated computer security research and thinking for the last twenty to twenty-five years -formalism and pragmatism.In spite of all their work, progress has been limited, system designers do not incorporate security principles and security is seen as a detriment to functionality.This paper suggests that an architectural approach, fostered by better communication among security researchers and between the security and operational communities, may yield more practical and effective security solutions.These axhitectural solutions are not totally general, but they have a structure and are applicable to large classes of problems.Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or dktrihuted for profit or commercial advantage and that copies hear this notice and the full citation on the first page.To copy otherwise, to republish, to post on servers or to redis+ihute to lists, requires prior specific permission and/or a fee.