Separation of duty using high water marks
Simon N. Foley · 2002
The paper describes an approach to specifying and enforcing separation of duty policies using information flow controls. Separation flow policies are based on the notion that sufficient information must be present before it may flow to a receiver. These policies also have natural integrity duals. A high water mark mechanism is described that can enforce these policies.>