FOUNDATIONS OF TRUSTED SYSTEMS