principle of least privilege

DACM focus on enriching RBAC model by adopting access control context and solves the problem of violating the principle of least privilege.

DACM引入了访问控制上下文，有效地支持了数据库中的受控访问机制建模，并解决了原有方式中违反最小特权原则的问题。

The principle of least privilege requires that each program and every privileged user of the system should operate using the least amount of privilege necessary to complete the job.

最小特权原则要求系统中每个用户或进程仅有执行其授权任务所必需的最小特权集合。

Following the Principle of Least Privilege, Process-Based Access Control Model restricts the rights of process and avoids the abuse of authorized user's rights to prevent Trojan horse and computer virus from spreading in terminal computer system.

基于进程的访问控制模型遵循最小特权原则，通过约束进程的权限，避免权限滥用，从而达到阻止计算机病毒、木马在终端中传播和扩散的目的。