 This effectively allows the kernel to control which processes may access which objects in memory without the need to use separate address spaces and therefore requiring a context switch when an access occurs.This allows an efficient implementation of capability-based security.Two techniques are available for implementation