Glossary term
Security Reference Monitor, the kernel-mode enforcer of access control.
expert
How Windows actually decides allow/deny using tokens, descriptors, and SRM routines.