Secure Computer Systems: A Retrospective

Eight years after the completion of the "Secure Computer Systems" series, basic questions about that work are being raised. Is the model useful? Is it overly restrictive? Are further modeling efforts necessary to address current problems? This paper addresses those questions in a personal view of the development and the utility of the "Secure Computer Systems" security model.