High Assurance Models For Secure Systems