LOMAC: Low Water-Mark integrity protection for COTS environments
Protection: principles and practice