Answers are grounded in this paper and cite their sources.
In most existing systems, authorization is specified using some low-level system-specific mechanisms, e.g., protection bits, capabilities and access control lists. We argue that authorization is an independent semantic concept that must be separated
No takes yet. Share an insight, caveat, or question.
Woo et al. (1993) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: