Content-Dependent Security Policies in Avionics

We describe a tool (CBIF) for Content-Based Information Flow Control for a subset of the C programming language and show how to use it on applications from the avionics industry. In particular, we consider the secure gateways used in the separation kernels of operating systems designed according to the principles of Multiple Independent Levels of Security (MILS).