a practical alternative to domain and type enforcement integrity formal models

Chinese Acad Sci, State Key Lab Informat Secur, Inst Software, Chinese Acad Sci, CAS, Grad Univ, Natl Nat Sci Fdn ChinaMuch secure system policy development uses the DTE (Domain and Type Enforcement) model, but the DTE model cannot explicitly provide the security goals of the policy. The invariants of the only based-DTE integrity protection formal model are t