Answers are grounded in this paper and cite their sources.
Secure system design, verification and validation is often a daunting task, involving the merger of various protection mechanisms in conjunction with system security policy and configurations. This paper presents a generic approach to secure system development that can be readily applied to a wide range of secure systems. Use of this approach, based on separability, will greatly simplify the developer's overall design, verification and validation effort.
No takes yet. Share an insight, caveat, or question.
Jim Alves-Foss (2002) studied this question.