Remarks on the GWV Firewall
Ron van der Meyden · 2010
Greve, Wilding and Vanfleet (2003) have proposed a formal security policy for separation kernels, and used it prove a security claim for a firewall implemented in a system satisfying this security policy. The paper revisits their example and formulates a more general version of the result, that simplifies its structure and clarifies its information theoretic content. 1