Implementing security policies in software development tools

摘要: Disclosed is an access and information flow control framework that includes a series of phases. The first phase includes: receiving raw authorization requirement(s); creating requirement representation(s) from the requirement(s) using language; analyzing to ensure they are consistent conflict-free. second case authorization(s) validating consistency between use authorization(s). may be created by propagating subject hierarchy; enumerating implicit derived representation(s); resolving inconsistencies in authorization(s); completing incomplete third propagated at least one enumerated possible direct indirect requirement”; generating filtered filtering with policy. fourth operation ensuring conflict-free; handling errors any earlier