| Information flow control regulates where information is allowed to travel within an information system and between information systems (as opposed to who is allowed to access the information), without explicit regard to subsequent access to that information.
Information flow enforcement mechanisms compare security attributes on all information (data content and data structure) and source and destination objects, and respond appropriately (e.g., block, quarantine, alert administrator) when the mechanisms encounter information flows not explicitly allowed by the information flow policy.
Embedding of data within other data is often used for the surreptitious transfer of data. For example, embedding data within an image file (e.g., .jpg) is referred to as steganography and is used to circumvent protections in place to protect information.
The AS does not manage application data content. The AS provides an application hosting capability and this requirement would apply to hosted applications but not the AS.
|
