Key points are not available for this paper at this time.
Security policies define who may use what information in a computer system. Protection mechanisms are built into a system to enforce security policies. In most systems, however, it is quite unclear what policies a mechanism can or does enforce.
Jones et al. (Wed,) studied this question.