Rules for Security Mediators
Rules for Security Mediators
- Stored in a database within the mediating processor
- Simple but comprehensive
- Default is paranoid
- Every query is checked against every query rule (pre-processing)
- Every result is checked against every result rule (post-processing)
- Rules can be modified at all times by security officer (by experience, looking at patterns: importance of logs)
Gio Wiederhold TIHI Oct96 *