Dual labels revisited (computer security)

The utility and need for trusted labels used for functions other than access control is discussed. The author shows that information labels serve functions separate and distinct from that of sensitivity labels. In some instances, they function in capacities that are beyond the abilities of standard single-label-based systems. It is also shown that attempting to incorporate the marking function into sensitivity labels is not a trivial task, and that this provides added weight to the argument that markings should be incorporated in labels separate from sensitivity labels. It is noted how the existence of the floating information labels in the CMW (compartmented mode workstation) provides users with the ability to remain at a single security level and manipulate data of a lower security level, and how the information labels will ensure that the data is properly labeled.<
>