<commit_before>* a policy is a (written) statement of intent
* policies are implemented by procedures
* (application) controls ensure procedures are executed in the desired manner
* authentication verifies identity
* an access control model describes the operations a subject(s) can perform on an object
* an access control model should be able to explicitly grant and revoke access
* authorization updates an access control model
* access approval uses the access control model to determine if a subject is permitted to access an object
* accounting records all authentication, authorization and access activity
* accounting enables activities such as billing, trending analysis and capacity planning
* authentication, authorization, accounting ([AAA](http://en.wikipedia.org/wiki/AAA_protocol))
* [tokenization](https://www.youtube.com/watch?feature=player_embedded&v=-DqCtdc30LY)<commit_msg>minor update to "the story" in docs<commit_after>### The Story
* a policy is a (written) statement of intent
* policies are implemented by procedures
* (application) controls ensure procedures are executed as per the policy
* authentication verifies identity
* an access control model describes the operations a principal can perform on an object
* it should be possible to explicitly grant and revoke access to an object in an access control model
* authorization updates an access control model
* access approval uses the access control model to determine if a principal is permitted to access an object
* accounting records all authentication, authorization and access activity
* accounting enables activities such as billing, trending analysis and capacity planning

### References
* [What is the meaning of Subject vs. User vs. Principal in a Security Context?](http://stackoverflow.com/questions/4989063/what-is-the-meaning-of-subject-vs-user-vs-principal-in-a-security-context)
* [Def'n - wikipedia: authentication, authorization, accounting (AAA)](http://en.wikipedia.org/wiki/AAA_protocol)
* [Video: "60 Seconds Smarter on Tokenization" from Intel](https://www.youtube.com/watch?feature=player_embedded&v=-DqCtdc30LY)
* [Def'n - http://searchsecurity.techtarget.com/: tokenization](http://searchsecurity.techtarget.com/definition/tokenization)
{'fraction_non_alphanumeric': 0.07435440783615316, 'fraction_numerical': 0.00578806767586821, 'mean_word_length': 5.8090909090909095, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 2, 'lorem ipsum': 0, 'www.': 2, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1592179', 'n_tokens_mistral': 550, 'n_tokens_neox': 518, 'n_words': 243}