Figure I REFERENCE MONITOR 1 . Completeness - The mechanism must be invoked on every access by a subject to an object. 2. Isolation - The mechanism and its data base must be protected from unauthorized alteration. 3. Verifiability - The mechanism must be small, simple, and understandable so that it…
Hinckley,A C · Mitre corp bedford mass · Data processing security · Computers · Communications networks · Secure communications · Coding · Identification systems · Access · Data processing terminals · Communication terminals
Internet Archive · Defense Technical Information Center · Public domain (US government work). Free to use for anything.