| Information flow control regulates where information is allowed to travel within an information system and between information systems (as opposed to who is allowed to access the information), without explicit regard to subsequent accesses to that information.
Application-specific examples of flow control enforcement can be found in information protection software (e.g., guards, proxies, gateways, and cross domain solutions (CDS)) employing rule sets or establishing configuration settings restricting information system services or providing message-filtering capability based on content (e.g., using key word searches or document characteristics).
This is an information flow requirement. Information flow control applies to applications like a CDS. An AS is not a CDS.
|
