The PEI framework for application-centric security

Ravi Sandhu
2009 Proceedings of the 5th International ICST Conference on Collaborative Computing: Networking, Applications, Worksharing  
This paper motivates the fundamental importance of application context for security. It then gives an overview of the PEI framework for application-centric security and outlines some of the lessons learned in applying this framework. PEI stands for Policy, Enforcement and Implementation, signifying three distinct layers at which security policy and design decisions need to be made. The framework was introduced by this author in 2006 [35]. It is closely related to the earlier OM-AM framework also introduced by this author in 2000 [32] .
doi:10.4108/icst.collaboratecom2009.8382 dblp:conf/colcom/Sandhu09 fatcat:x3xivnbhi5d4bcjt23cjrbsgju