Specification issues of secure systems

This paper discusses the development of an accredited multilevel secure (MLS) system. The author reviews the methods and some problems in producing the Descriptive Top Level Specification (DTLS) and the attendant correspondences to the Formal Security Policy Model. Some of the problems encountered stem from the selection of a traditional but insufficient policy model. This paper identifies specific shortcomings of the policy model and recommends a different perspective to help alleviate such problems in the future.<
>