In computer security, the containment of users and resources in an ADP system in such a way that users and processes are separate from one another as well as from the protection controls of the operating system.

• 在计算机安全学中,自动数据处理系统中的用户和资源的相关牵制关系,也就是用户和进程彼此分开,且和操作系统的保护控制也分开来。