April 10, 2017 Outline

Reading: Chapters from revised text, §3.3–3.4

1. Schematic Protection Model
   1. Protection type, ticket, function, link predicate, filter function
   2. Take-Grant as an instance of SPM
   3. Create rules and attenuation
2. Safety analysis
   1. Definitions
   2. path^h predicate
   3. Capacity flow function
   4. Maximal state: definition, existence, derivability
3. Acyclic attenuating schemes and decidability