Logical Separation operates by defining specific domains for each area of security, and ensuring that that a user program cannot access objects outside its domain.
-----
OS Security by Separation
Separation methods:
• Physical
Different physical objects/printers for different levels of security
• Temporal (time)
Programs with different security levels execute at different times
• Logical
User program cannot access objects outside its domain
• Cryptographic
Processes conceal their data and logic through use of encryption
Combinations are possible