An interpretation of a refined Bell-La Padula model for the TMach kernel

The author discusses an interpretation of the Bell-La Padula (BLP) model (1973) for the Trusted Mach (TMach) kernel. The BLP model is reviewed along with specific refinements to the discretionary-security property, /sup */-property, the notion of trusted subjects and activation. A correspondence between the revised BLP model and the abstractions provided by the TMach kernel was demonstrated.<
>