A reference monitor concept defines a set of design requirements on a reference validation mechanism, which 
enforce an access control policy over subject's (e.g., processes and users) ability to perform opereation (e.g., read and write) on objects (e.g., file and sockets) on a system.