General Message Flow Modulator

The general message flow modulator is a high level design of a family of mechanisms for controlling the flow of messages from a source to a destination. This family of mechanisms has a wide variety of computer security applications. The general modulator has been formally specified and proved, and one member of the family has been implemented as a running prototype to give a concrete illustration of the kinds of control that can be provided. The general modulator has been specified and implemented in Gypsy, and the proofs have been done mechanically within the Gypsy Verification Environment.