The trusted server approach to multilevel security

Suggests the trusted server as a means of injecting multilevel security into applications such as command control and intelligence systems. It presents an example trusted database server and a trusted gateway server. A taxonomy is presented for gateway servers. Finally, the paper argues that the trusted server is a gap filler, in that it can off load much of the security design, maintenance and distribution complexity from client systems by permitting lower evaluation level clients to be used with the trusted server bearing much of the cost of multilevel security