References:
An information flow model FM
is defined as below:
To be secure, it requires:
If you could revise
the fundmental principles of
computer system design
to improve security...
... what would you change?