Trusted Operating System
Mandatory Access Control - Multi-Level Security
Privileges and Authorizations - no "super-user"
