What is intransitive noninterference?

Abstract

The term "intransitive noninterference" refers to the information flow properties required of systems like downgraders, in which it may be legitimate for information to flow indirectly, between two users but not directly. We examine the usual definition of this property in terms of a modified purge function, and show that this is a distinctly weaker property than an alternative we derive from considerations of determinism.