TRUSTED BOOT Analyze the boot sequence and formulate the integrity and confidentiality hierarchy to guarantee trusted boot. Trusted boot implies a lower integrity element cannot modify a higher integrity ROM BOOTLOADER KERNEL SYSTEM FILE USER FILE Formulate the Kripke structure for such a system Identify all the possible interaction paths of the elements and formulate security policies for such a system