Protection Context Goal Provide an abstract model to unify protection approaches (and show how they relate to each other) Implementation Objects Hydra Multics ResourceObjects Segments Domains Hydra Multics Logical name space Principle identifiers (users) Attributes e.g. Read Write Execute Takeaway