===== Security Model =====
[[ddsf:public:guidebook:06_append:glossary:start| Return to Glossary ]]

The **Security Model** for [[ddsf:public:guidebook:06_append:glossary:d:data_distribution_service_dds]] defines the security principals (users of the system), the objects that are being secured, and the operations on the objects that are to be restricted. DDS applications share information on DDS Global Data Spaces (called [[ddsf:public:guidebook:06_append:glossary:d:domain_dds|DDS Domains]]) where the information is organized into [[ddsf:public:guidebook:06_append:glossary:t:topic|Topics]] and accessed by means of read and write operations on data-instances of those Topics.

Ultimately what is being secured is a specific DDS Global Data Space (domain) and, within the domain, the ability to access (read or write) information (specific Topic or even data-object instances within the Topic) in the DDS Global Data Space.

Securing DDS means providing:
  * **[[ddsf:public:guidebook:06_append:glossary:c:confidentiality|Confidentiality]]** of the data samples
  * **[[ddsf:public:guidebook:06_append:glossary:d:dataintegrity|Integrity]]** of the data samples and the messages that contain them
  * **[[ddsf:public:guidebook:06_append:glossary:a:authentication]]** of DDS writers and readers•Authorization of DDS writers and readers
  * **Message-origin** authentication
  * **Data-origin** authentication
  * **[[ddsf:public:guidebook:06_append:glossary:n:nonrepudiation|Non-repudiation]]** of data (Optional) 

Source: [[https://www.omg.org/spec/DDS-SECURITY/1.1/PDF#Security_mode]] Section 7.1


/**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
/* To add a discussion page to this page, comment out the line that says 
  ~~DISCUSSION:off~~
*/
~~DISCUSSION:on|Outstanding Issues~~
~~DISCUSSION:off~~