Toward a New Form of MAC
-
Research by NSA with help from SCC
-
Generalized from prior Type Enforcement work
-
Provide flexible support for security policies
-
Cleanly separate policy from enforcement
-
Address limitations of traditional MAC
-
DTMach, DTOS, Flask