Metadata is defined as data providing information about one or more other pieces of data such as the purpose of the data, the author or creator of the data, and the network location of where the data was created, and network specific information.
Information flow control regulates where information is allowed to travel within a network and between hosts as opposed to who is allowed to access the information. Information flow enforcement mechanisms compare security attributes on all information such as source and destination objects, and respond appropriately (e.g., block, quarantine, alert administrator) when the mechanisms encounter information flows not explicitly allowed by the information flow policy. This requirement is applicable to network devices such as firewalls and is not applicable to the routing function. |