Home › Security Architecture & Engineering

Take-Grant Model Explained — Security Models (Part 8)

Security Architecture & EngineeringCISSP

Take-Grant is the rights-transfer model in our Security Models series — drawn as a directed graph, with four rules that show how permissions move, when they can change, and where leakage can occur. In Part 8, we cover the four rules, the Take/Grant copy function, and the operating-system analogy.

What you will learn

• What the Take-Grant model is and how its directed graph works
• The four rules: Take, Grant, Create, and Remove
• Why Take and Grant are a copy function, while Create and Remove are not defined by the graph
• How the rules reveal when rights can change and where leakage can occur
• The real-world analogy to OS permission inheritance — and to an owner assigning a new permission

Part of the series: Security Models Explained — Overview (Part 1)

1. Security Models Explained — Overview (Part 1)
2. Bell-LaPadula Model Explained — Security Models (Part 2)
3. Biba Model Explained — Security Models (Part 3)
4. Clark-Wilson Model Explained — Security Models (Part 4)
5. Brewer-Nash Model Explained — Security Models (Part 5)
6. Graham-Denning Model Explained — Security Models (Part 6)
7. Harrison-Ruzzo-Ullman (HRU) Model Explained — Security Models (Part 7)
8. Take-Grant Model Explained — Security Models (Part 8)
9. Noninterference Model Explained — Security Models (Part 9)

More in Security Architecture & Engineering

• Cryptography Explained — Overview (Part 1)
• Secure Access Service Edge (SASE) Explained