METHOD FOR IMPLEMENTING SYSTEM STATE AWARE SECURITY POLICIES

摘要

A method and system for implementing system state aware Mandatory Access Control (MAC) on a computer-based system (10) by introducing a data collection module to collect real-time input data (3), a security service module that can determine the current system state based on the input data (3) and a set of predefined rules that enable the security service module to respond to a request of a subject (1) regarding an object (2) based at least partly on the current system state. The method further allows altering the system state, not only observing it.