Security attributes are abstractions representing the basic properties or characteristics of an entity (e.g., subjects and objects) with respect to safeguarding information. These attributes are typically associated with internal data structures (e.g., records, buffers, files) and are used to enable the implementation of access control and flow control policies, reflect special dissemination, handling or distribution instructions, or support other aspects of the information security policy. Organizations define the security attributes (e.g., classified, FOUO) of their data. The binding of these attribute assignments to information must be maintained while the data is being transmitted to ensure the information is secured in accordance with the DoD required handling instructions.
Maintaining the binding of security attributes is not a function of DNS. |