Security for Next Generation Hypertext Systems

Abstract

This paper concerns the need for enhancing hypertext systems with security protection. We identify the elements of hypertext models which must be subject to security control. Main attention is directed toward hypertext and access control preventing the information stored from unauthorized disclosure or modification. From the class of known security models we consider the Discretionary Models, the Mandatory Models, the Personal Knowledge Approach, and the Clark and Wilson Model as candidates for the underlying security paradigm of hypertext systems. The security techniques considered originate from emphasizing different goals: Discretionary Models try to assign access privileges to users, Mandatory Models try to keep secrets, the Personal Knowledge Approach focuses on enforcing the constitutional right of informational self-determination of humans, and the Clark and Wilson Model tries to adapt common commercial security practice to computerized systems. The applicability of these security models to hypertext is discussed and their pros and cons are outlined.