What are the differences between security policy and security mechanism with operating systems

Question

What is the difference between the two as I am not sure.

This is in reference with operating systems.

paulsm4 · Accepted Answer · 2012-05-18T19:21:31.923

Your question is overly vague - please cite a specific reference; please give some context.

In general, however:

"Mechanism enables policy".

"Policy" is what you want to do; "mechanism" is the how that lets you do it.

IMHO...

PS: Here is (one of?) the original paper(s) that refers to "separation of policy and mechanism":

HYDRA - The kernel of a multiprocessor operating system, William Allan. Wulf

Here's another (slightly more amusing) discussion, from the "politically incorrect" Mick O'Pedia:

http://mickopedia.org/mickify.py?topic=Policies_and_mechanisms

score 1 · Answer 2 · answered Dec 03 '12 at 05:07

1

Security policy is just a statement about what is allowed and not allowed to do in a system while security mechanism is a procedure how to implement the security policy.It is said to be a tool,methodology or procedures for security enforcement.

answered Dec 03 '12 at 05:07

TARCISIUS

11
1

score 0 · Answer 3 · answered May 18 '12 at 18:25

0

The same as the difference between the words "policy" and "mechanism": WHAT you're trying to accomplish and HOW you're going to accomplish it.

answered May 18 '12 at 18:25

Scott Hunter

48,888
12
60
101

Just trying to grasp the actual difference between the two in terms of operating systems, not the words itself. – Banned May 18 '12 at 18:26

What are the differences between security policy and security mechanism with operating systems

3 Answers3