A general approach to evaluation of secure systems

As we know, current composable security properties are logically pessimistic, particularly when they are applied to security analysis of a system in a modular way. To overcome this problem we present a general approach to properly dealing with composition of components or modules by using matrices that describe operational properties of the components. The matrices of an entire system can be generated from those of its components, and then the security of the system be determined in terms of its matrices. This matrix-based approach enables us to allocate appropriate security requirements to components or to examine composability of component security requirements. Such security requirements allow a system with strong security to be built from components with weaker security