Mapping Trusted Systems Technologies to E-security Requirements

需要在国家和国际安全标准的有力指导下，采用一种基于软件的新办法，以强制性访问控制为基础，简化对其信息基础设施的管理保护。这将采用与目前国际上正在考虑的可信系统技术相一致的安全定义工具集的形式。还没有开发出这样的可信系统来解决当前的商业IT产品环境。信息系统的安全和保障，防止攻击和非法使用的形式的一个重要组成部分？国家信息基础设施保护（NIIP）？，更好的一步？电子安全？ 现有的商业（不可信）操作系统缺乏电子安全的关键安全基础，使电子应用程序容易受到篡改和绕过，这可能导致整个系统安全的失败。

A new software based approach, strongly guided by national and international security standards based upon mandatory access control, is required to simplify for management the protection of their information infrastructure. This will be in the form of a security definition toolset aligned to trusted systems technologies currently under consideration internationally. No such trusted system has been developed to address current commercial IT product environments. The safety and security of information systems against attack and illicit usage form an essential component of ?National Information Infrastructure Protection (NIIP)?, a move to better ?e-security?. Existing commercial (untrusted) operating systems lack the critical security bases for e-security making e-applications vulnerable to tampering and bypass which can cause failures in overall system security.