<!DOCTYPE html>
<html class="client-nojs vector-feature-night-mode-disabled vector-feature-language-in-header-enabled vector-feature-language-in-main-page-header-disabled vector-feature-page-tools-pinned-disabled vector-feature-toc-pinned-clientpref-1 vector-feature-main-menu-pinned-disabled vector-feature-limited-width-clientpref-1 vector-feature-limited-width-content-enabled vector-feature-custom-font-size-clientpref-1 vector-feature-appearance-pinned-clientpref-1 vector-sticky-header-enabled" lang="en" dir="ltr"><head>
<meta charset="UTF-8">
<title>Graham–Denning model</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="canonical" href="https://en.wikipedia.org/wiki/Graham%E2%80%93Denning_model"> <link href="./mw/skins.vector.icons.css" rel="stylesheet" type="text/css">
<link href="./mw/skins.vector.search.codex.styles.css" rel="stylesheet" type="text/css">
<link href="./mw/skins.vector.styles.css" rel="stylesheet" type="text/css">
<link href="./mw/user.styles.css" rel="stylesheet" type="text/css">
<meta name="ResourceLoaderDynamicStyles" content="">
<link rel="stylesheet" type="text/css" href="./mw/site.styles.css">
<link rel="stylesheet" type="text/css" href="./mw/noscript.css">
<link rel="stylesheet" type="text/css" href="./footer.css">
<link rel="stylesheet" type="text/css" href="./vector-2022.css">
</head>
<body class="skin--responsive skin-vector skin-vector-search-vue mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-Graham–Denning_model rootpage-Graham–Denning_model skin-vector-2022 action-view">
<div class="mw-page-container">
<div class="mw-page-container-inner">
<div class="mw-content-container">
<main id="content" class="mw-body">
<header class="mw-body-header vector-page-titlebar">
<h1 id="firstHeading" class="firstHeading mw-first-heading">
<span id="openzim-page-title" class="mw-page-title-main"><span class="mw-page-title-main">Graham–Denning model</span></span>
</h1>
</header>
<a id="top"></a>
<div id="bodyContent" class="vector-body ve-init-mw-desktopArticleTarget-targetContainer" aria-labelledby="firstHeading" data-mw-ve-target-container="">
<div id="mw-content-text" class="mw-body-content mw-content-ltr" lang="en" dir="ltr"><div class="mw-content-ltr mw-parser-output" lang="en" dir="ltr"><style data-mw-deduplicate="TemplateStyles:r1251242444">
/* start https://en.wikipedia.org/ */
.mw-parser-output .ambox{border:1px solid #a2a9b1;border-left:10px solid #36c;background-color:#fbfbfb;box-sizing:border-box}.mw-parser-output .ambox+link+.ambox,.mw-parser-output .ambox+link+style+.ambox,.mw-parser-output .ambox+link+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+style+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+link+.ambox{margin-top:-1px}html body.mediawiki .mw-parser-output .ambox.mbox-small-left{margin:4px 1em 4px 0;overflow:hidden;width:238px;border-collapse:collapse;font-size:88%;line-height:1.25em}.mw-parser-output .ambox-speedy{border-left:10px solid #b32424;background-color:#fee7e6}.mw-parser-output .ambox-delete{border-left:10px solid #b32424}.mw-parser-output .ambox-content{border-left:10px solid #f28500}.mw-parser-output .ambox-style{border-left:10px solid #fc3}.mw-parser-output .ambox-move{border-left:10px solid #9932cc}.mw-parser-output .ambox-protection{border-left:10px solid #a2a9b1}.mw-parser-output .ambox .mbox-text{border:none;padding:0.25em 0.5em;width:100%}.mw-parser-output .ambox .mbox-image{border:none;padding:2px 0 2px 0.5em;text-align:center}.mw-parser-output .ambox .mbox-imageright{border:none;padding:2px 0.5em 2px 0;text-align:center}.mw-parser-output .ambox .mbox-empty-cell{border:none;padding:0;width:1px}.mw-parser-output .ambox .mbox-image-div{width:52px}@media(min-width:720px){.mw-parser-output .ambox{margin:0 10%}}@media print{body.ns-0 .mw-parser-output .ambox{display:none!important}}
/* end https://en.wikipedia.org/ */
</style>
<p>The <b>Graham–Denning model</b> is a <a href="Computer_security_model" title="Computer security model">computer security model</a> that shows how subjects and objects should be securely created and deleted.
It also addresses how to assign specific access rights. It is mainly used in access control mechanisms for <a href="Distributed_systems" class="mw-redirect" title="Distributed systems">distributed systems</a>. There are three main parts to the model: A set of subjects, a set of objects, and a set of eight rules. A subject may be a process or a user that makes a request to access a resource. An object is the resource that a user or process wants to access.
</p>
<meta property="mw:PageProp/toc">
<div class="mw-heading mw-heading2"><h2 id="Features">Features</h2></div>
<p>This model addresses the security issues associated with how to define a set of basic rights on how specific <b>subjects</b> can execute security functions on an <b>object</b>.
The model has eight basic protection <b>rules</b> (actions) that outline:
</p>
<ul><li>How to securely create an object.</li>
<li>How to securely create a subject.</li>
<li>How to securely delete an object.</li>
<li>How to securely delete a subject.</li>
<li>How to securely provide the read access right.</li>
<li>How to securely provide the grant access right.</li>
<li>How to securely provide the delete access right.</li>
<li>How to securely provide the transfer access right.</li></ul>
<p>Moreover, each object has an owner that has special rights on it, and each subject has another subject (controller) that has special rights on it.
</p><p>The model is based on the<b> <a href="Access_Control_Matrix" class="mw-redirect" title="Access Control Matrix">Access Control Matrix</a></b> model where rows correspond to subjects and columns correspond to objects and subjects, each element contains a set of <b>rights</b> between subject i and object j or between subject i and subject k.
</p><p>For example an action A[s,o] contains the rights that subject s has on object o (example: {own, execute}).
</p><p>When executing one of the 8 rules, for example creating an object, the matrix is changed: a new column is added for that object, and the subject that created it becomes its owner.
</p><p>Each rule is associated with a<b> precondition,</b> for example if subject x wants to delete object o, it must be its owner (A[x,o] contains the 'owner' right).
</p>
<div class="mw-heading mw-heading2"><h2 id="Limitations">Limitations</h2></div>
<p><a href="HRU_(security)" title="HRU (security)">Harrison–Ruzzo–Ullman</a> extended this model by defining a system of protection based on commands made of primitive operations and conditions.
</p>
<div class="mw-heading mw-heading2"><h2 id="See_also">See also</h2></div>
<ul><li><a href="Access_Control_Matrix" class="mw-redirect" title="Access Control Matrix">Access Control Matrix</a></li>
<li><a href="Bell%E2%80%93LaPadula_model" title="Bell–LaPadula model">Bell–LaPadula model</a></li>
<li><a href="Biba_model" class="mw-redirect" title="Biba model">Biba model</a></li>
<li><a href="Brewer_and_Nash_model" title="Brewer and Nash model">Brewer and Nash model</a></li>
<li><a href="Clark%E2%80%93Wilson_model" title="Clark–Wilson model">Clark–Wilson model</a></li>
<li><a href="HRU_(security)" title="HRU (security)">Harrison–Ruzzo–Ullman model</a></li></ul>
<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>
<ul><li>Krutz, Ronald L. and Vines, Russell Dean, The CISSP Prep Guide; Gold Edition, Wiley Publishing, Inc., Indianapolis, Indiana, 2003.</li>
<li><a rel="nofollow" class="external text" href="https://books.google.com/books?id=O3VB-zspJo4C&dq=graham-denning+model&pg=PA244">Security in Computing (by Charles P. Pfleeger, Shari Lawrence Pfleeger)</a></li>
<li><a rel="nofollow" class="external text" href="http://www.cs.ucr.edu/~brett/cs165_s01/LECTURE11/lecture11-4up.pdf">http://www.cs.ucr.edu/~brett/cs165_s01/LECTURE11/lecture11-4up.pdf</a></li></ul></div><!--htdig_noindex--><div><div class="zim-footer">
This article is issued from <a class="external text" title="Last edited on 2025-06-03" href="https://en.wikipedia.org/wiki/?title=Graham%E2%80%93Denning_model&oldid=1293743624">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.
</div>
</div><!--/htdig_noindex--></div>
</div>
</main>
</div>
</div>
</div>
</body></html>