| Information flow control regulates where information is allowed to travel within an information system and between information systems (as opposed to who is allowed to access the information), without explicit regard to subsequent access to that information.
Application-specific examples of flow control enforcement can be found in information protection software (e.g., guards, proxies, gateways and cross domain solutions (CDS)) employing rule sets or establishing configuration settings restricting information system services or providing message-filtering capability based on content (e.g., using key word searches or document characteristics).
A crucial part of any flow control solution is the ability to create policy filters. Policy filters serve to enact and enforce the organizational policy as it pertains to controlling data flow.
Organization defined security policy filters include, for example, file type checking filters, structured data filters, unstructured data filters, metadata content filters, and hidden content filters.
Information flow control only applies to a CDS. An AS is not a CDS. |
