Clark-Wilson Policy

• Security is established through the authorizations of transactions of transformation procedures.

• Security is modeled through the use of access triples: <userid, TPi,{CDIj, CDIk, ...}>

• The only way to modify data is to request a transformation procedure to carry out the operation.

Notes: