far back as 1973 with the Stanford Research Institute (SRI) Computer Science
Lab’s (CSL) Provably Secure Operating System (PSOS). [91]The PSOS project
demonstrated how a complex system of small modular components could be
predictably composed and analyzed using formal specifications and examining