Security as a Strategy (SaaS)

Lee, 
 
There has not been much done in this area to date, except for Trustifier technology. Trustifier is a fine-grained access and audit control technology that works at the data file level for all authorized users. The existing IT infrastructure is converted into a least privilege, deny-by default environment. 
 
There has never been an 'authorization' component on systems or in the network, post-authentication, and authentication can not act as a proxy for authorization where a trusted environment is truly required,(which is everywhere, really). 
 
This authorization component constitutes the 'internal controls' that have never been part of OS design, and is the inherent design flaw that is the cause of the dysfunctionality (and failure) of the IT security industry. 
 
Trustifier is a run-time injection of internal controls into existing OSs to correct that omission.