Rules for Security Mediators

• Stored in a database within the mediating processor

• Simple but comprehensive

• Default is paranoid

• Every query is checked against every query rule (pre-processing)

• Every result is checked against every result rule (post-processing)

• Rules can be modified at all times by security officer (by experience, looking at patterns: importance of logs)

Gio Wiederhold TIHI Oct96 *

Previous slide

Next slide

Back to first slide

View graphic version