Page 498 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 498
Cascading: Input for one system comes from the output of
another system.
Feedback: One system provides input to another system, which
reciprocates by reversing those roles (so that system A first
provides input for system B and then system B provides input
to system A).
Hookup: One system sends input to another system but also
sends input to external entities.
Take-Grant Model
The Take-Grant model employs a directed graph (Figure 8.2) to
dictate how rights can be passed from one subject to another or from a
subject to an object. Simply put, a subject with the grant right can
grant another subject or another object any other right they possess.
Likewise, a subject with the take right can take a right from another
subject. In addition to these two primary rules, the Take-Grant model
may adopt a create rule and a remove rule to generate or delete rights.
The key to this model is that using these rules allows you to figure out
when rights in the system can change and where leakage (that is,
unintentional distribution of permissions) can occur.
