| 
 |
|
|
|
«Design-by-assumption works as long as assumptions hold. Assumptions are
shortcuts to useful efficiencies, provided they are not violated. »
David S. Isenberg
«If the kernel is not evaluated to an MLS-capable protection profile, MLS features cannot be trusted
regardless of how impressive the demonstration looks.»
J. Davidson
Home