An Extension of Role Based Access Control for Trusted Operating Systems and Its Coloured Petri

The notion of trusted operating system was proposed to solve the security prob-lems of current security solutions. Such security solutions as intrusion detection sys-tems, firewalls have been used widely. However, they are run in the application-level of computer systems. Therefore many application-level processes including hacking programs can easily bypass them. Numerous bypassing techniques already have been released, and they reveal the weakness of those solutions. On the contrary, a trusted operating system provides security mechanisms at its kernel that is the lower level than the application-level. The application-level processes cannot bypass the kernel-level security mechanisms. In addition, the lower-level secu-rity mechanisms are more efficient and easier for analysis. Consequently, the trusted operating systems provide solider and more fundamental security mechanisms than application-level solutions