A reference monitor concept defines a set of design requirements on a reference validation mechanism, which
enforce an access control policy over subject's (e.g., processes and users) ability to perform opereation (e.g., read and write) on objects (e.g., file and sockets) on a system.
The claim is that a reference validation mechanism that satisfies the reference monitor concept will correctly enforce a system's access control policy, as it must be invoked to mediate all security-sensitive operations. must not be tampered, and has undergone complete analysis and testing to verify correctness