On information flow security models

Prior work is discussed and positions are given on the following two questions: (1) What basis should be used to evaluate information flow security models? and (2) What should the scope of an information flow security model be? As part of the position on question (1), a reformulation of McLean's FM (1990) is given.<
>