What are the essential characteristics of the reference monitor?
It is versatile, accurate, and operates at a very high speed.
It is tamper-proof, can always be invoked, and must be small enough to test.
It is restricted, confidential, and top secret