The design of a protection system for an operating system is seen to involve satisfying the competing properties of richness and integrity. Achieving both requires the interplay of analysis and synthesis. Using a formal model from the literature, three designs are developed whose integrity (with the help of the model) can be shown.
No takes yet. Share an insight, caveat, or question.
Lawrence Snyder (1977) studied this question.
Synapse has enriched 2 closely related papers on similar clinical questions. Consider them for comparative context: