Patent ID: 7243235
Filing Date: 2007-07-10
Classification: G06F,H04L,Y10S

Abstract:
1. A mandatory access control method for securing an operating system comprising: providing a first integrity subject having a high integrity level, wherein the first integrity subject is a set of computer instructions residing in an operating system, wherein the operating system employs a low water-mark access control mechanism; reading a first object having a high integrity level through the first integrity subject; attempting to read a second object through the first integrity subject, the second object having an integrity level that is lower than the high integrity level; determining whether a conflict exists between the first object and the second object, such that a conflict exists when the second object may corrupt the first object; retaining the high integrity level of the first integrity subject when there is no conflict between the first object and the second object; and demoting the integrity level of the first integrity subject to a lower integrity level when a conflict exists between the first object and the second object.