To Bell and back: developing a formal security policy model for a C/sup 2/ system

The authors describe several interesting aspects of the development of a formal security policy model for a military command and control (C/sup 2/) system. The C/sup 2/ system is being built to meet the B3 division and class of DOD 5200.28 STD. The paper discusses the real world issues involved in developing a useful and accurate model of a very complex security policy. The policy developed for the target application has several interesting features and consequently the model is interesting in several respects. The system has several policy elements that required some novel mathematical approaches. These are explained in detail.<
>