PRIMA: policy-reduced integrity measurement architecture
A lattice model of secure information flow