A rigorous approach to determining objects

This paper describes RODA-the Rigorous Object Determination Approach. RODA is a way of determining the objects that require protection in a trusted system in a consistent fashion, as opposed to the current ad-hoc methods. It is applicable to all trusted systems, but is most useful in low to medium assurance systems. It begins by examining accessibility through the TCB interface and developing a list of candidate objects. These candidate objects are refined and grouped based on characteristics such as namability, potential manipulators, and information flow. The results of information collection are then analyzed to determine the named and storage objects in the system. The paper includes a brief example of the use of the technique