Security

[Ken Laskey <klaskey@mitre.org>]

<original>

Trust Models

</original>

<comment>

I can also have personal criteria for trust, e.g. never trust redheads.

</comment>

<original>

In general, there are three contexts in which these considerations occur:

• individual
• group, or intragroup
• multi-group or intergroup

</original>

<comment>

Hmm, this is the same as was introduced in the Visibility section.  Coincidence or a more general consideration throughout?

</comment>

<original>

whether a Web Service model or a REST model is employed, it needs to be clearly described.

</original>

<comment>

Sections 1.3 - 1.6 talk to Security Policy Description, Security Policy Decisions, Security Policy Enforcement, and Security Conflict Resolution.  Is there anything special when discussing these in a security context than in a non-security context?

</comment>

------------------------------------------------------------------------------------------

Ken Laskey

MITRE Corporation, M/S H305     phone:  703-983-7934

7515 Colshire Drive                        fax:        703-983-1379

McLean VA 22102-7508

smime.p7s