An alternative implementation of the reference monitor concept [military messaging, secure]

Research into the multilevel secure automated exchange of military messages is reported. This work represents approaches to `designed-in security that are not based on the security kernal and Bell/LaPadula model approaches that have dominated military message systems and the industry. Instead, the approach is based on the concept of a network of communicating finite-state machines. The resulting product is the military message embedded executive (ME2), and its supporting hardware base, the trusted military message processor. Beyond its state machine architecture it is suggested that the (ME2) is additionally unique for its attention to the process security requirements of embedded computers