Fundamental difference between a security management model

  What is the fundamental difference between a security management model and a security architecture model? Explain with an illustrative example. (a) What are the key principles on which access control is founded? (b) What two access control methods that use a state machine model to enforce security? Compare and contrast the two methods by explaining their similarities and differences.