The security kernel approach to secure operating systems

The security kernel is a disciplined approach to the organization and isolation of security-related functions. To guarantee completeness of the security kernel and enhance the possibility of formal verification, the design is based upon a mathematical representation of a secure system. The mathematical model most often used as the basis for kernel design is examined. A basic set of kernel functions is presented and issues relevant to kernel architectures are discussed.