at program execution time, where the protection is within the operating system