Outline for April 29, 2003

  1. BLP: formally
    1. Define ssc-preserving, *-property-preserving, ds-property-preserving
    2. Define relation W(ω)
    3. Show conditions under which rules are ssc-preserving, *-property-preserving, ds-property-preserving
    4. Show when adding a state preserves those properties
    5. Example instantiation: get-read for Multics
  2. Tranquility
    1. Strong tranquility
    2. Weak tranquility
    3. Goals of integrity policies

This document is also available in Postscript and PDF.