Metapolicies I

  • Authors:
  • Hilary H. Hosmer

  • Affiliations:
  • -

  • Venue:
  • ACM SIGSAC Review - Special issue on Issues '91: data management security and privacy standards
  • Year:
  • 1992

Quantified Score

Hi-index 0.00

Visualization

Abstract

Metapolicies, or "policies about policies", may become a powerful concept for developing the large, complex, and interrelated trusted systems that military, commercial and non-profit organizations need today. Metapolicies provide a framework for clarifying policies and for successfully coordinating security policies and subpolicies.When there is only one security policy, metapolicies tend to be implicit, embedded, and fixed. When more than one security policy is involved, as in a multipolicy system, metapolicies must become explicit and flexible.This paper illustrates metapolicies implicit in simple security policies, demonstrates how metapolicies can coordinate multiple security policies, and provides a foundation for future study of metapolicies.