Granularity of platform State

• Post OS integrity is not that easy to maintan

• To support full confidentiality Mandatory Access Controls must be present

• Executable content is not just ELF format. Java, Perl, Python, Shell scripts, and many more

• Platform behavior depends also on :

  • Configuration files
  • Command line options
  • Other security policies

• Management becomes more complex

Notes: