A communication protocol for a multi-level secure network

Abstract

An implementation of the SNet multi-level secure distributed system is described in the context of the specifications and the security model for SNet. This implementation contains a communication protocol that satisfies the specification and thereby enforces the security policy. The location of the trusted security kernel software is explicitly identified relative to the protocol layers. An informal argument is given to show how the protocol satisfies the specification and the security model.<>