Concerning `modeling' of computer security

摘要

The author examines the notion of modeling, first as it applies tonphysical sciences, and then with reference to computer security. Henidentifies two undesirable aspects of models in general, which he callsnincompleteness and inapplicability. A model of security given by D.E.nBell and L.J. La Padula (1975) is examined in light of the criticismnthat a model is a definition of that which it models; the authornsuggests that the critic's definition of the terms `model' andn`security' is too wide