Tag: computer-security

David Bell and Leonard LaPadula turned military information-flow rules into a mathematical security model, making confidentiality policy something that could be stated as invariants over system states and transitions.

Jerome Saltzer and Michael Schroeder turned lessons from Multics into a durable set of security design principles centered on least privilege, complete mediation, fail-safe defaults, simplicity, and usable protection.