Security Policies and Security Models
Abstract
We assune that the reader is familiar with the ubiquity of information in the modern world and is sympathetic with the need for restricting rights to read, add, modify, or delete information in specific contexts. This need is particularly acute for systems having computers as significant components.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Agents often operate under dynamic permissioning, partial context propagation, and weakly enforced identity boundaries.
“Agents often operate under dynamic permissioning, partial context propagation, and weakly enforced identity boundaries (Goguen & Meseguer, 1982;Myers & Liskov, 1997).”
From Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents (2025) · cites this paper as Goguen & Meseguer, 1982
Cited by
Sorted by citations
Language-based information-flow security
Sabelfeld, A., & Myers, A. C. (2003) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2002.806121 · Cited by 1,907 · see citing works
A survey of approaches combining safety and security for industrial control systems
Kriaa, S., Pietre-Cambacedes, L., Bouissou, M., & Halgand, Y. (2015) · Reliability Engineering & System Safety · doi:10.1016/j.ress.2015.02.008 · Cited by 375 · see citing works
A type-based approach to program security
Volpano, D., & Smith, G. (1997) · Lecture Notes in Computer Science · doi:10.1007/bfb0030629 · Cited by 225 · see citing works
A Formal Foundation for Secure Remote Execution of Enclaves
Subramanyan, P., Sinha, R., Lebedev, I., Devadas, S., & Seshia, S. A. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134098 · Cited by 119 · see citing works
Information flow control for secure cloud computing
Bacon, J., Eyers, D., Pasquier, T. F. J.-M., Singh, J., Papagiannis, I., & Pietzuch, P. (2014) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2013.122313.130423 · Cited by 105 · see citing works
Coverage guided, property based testing
Lampropoulos, L., Hicks, M., & Pierce, B. C. (2019) · Proceedings of the ACM on Programming Languages · doi:10.1145/3360607 · Cited by 49 · see citing works
Amthor, P., Fischer, D., Kühnhauser, W. E., & Stelzer, D. (2019) · Proceedings of the 14th International Conference on Availability, Reliability and Security · doi:10.1145/3339252.3340509 · Cited by 14 · see citing works
Anderson, R., Stajano, F., & Lee, J.-H. (2002) · Advances in Computers · doi:10.1016/s0065-2458(01)80030-9 · Cited by 11 · see citing works
Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents
de Witt, C. S., Krawiecka, K., Krawczuk, I., Hagag, B., Anderson, W. L., Belcak, P., Bucknall, B., Cai, X., Chopra, A., Cohen, D., et al. (2025) · arXiv · doi:10.48550/arxiv.2505.02077 · Cited by 2 · see citing works
- Authors
- Goguen, J. A., & Meseguer, J.
- Affiliations
- SRI International (US)
- ORCID
- Meseguer, J.
- Venue
- 1982 IEEE Symposium on Security and Privacy
- Publisher
- IEEE
- Published
- 1982-04
- Pages
- 11-11
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W1977764760
- Cited by
- 2,119
- References
- 0
- Citations by year
- 2026: 32 · 2025: 40 · 2024: 41 · 2023: 39 · 2022: 47 · 2021: 78 · 2020: 63 · 2019: 88 · 2018: 83 · 2017: 73 · 2016: 94 · 2015: 100 · 2014: 103 · 2013: 78 · 2012: 102
- Type
- conference abstract
- Language
- en
- Open access
- closed
- Locations
- IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
- Topics
- Social Sciences › Sociology and Political Science › Access Control and Trust
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Keywords
- security policy, security model, access control, information security, cybersecurity, access to information
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
