This figure consists of three layers. The top layer represents a series of applications. It consists of three ovals labeled App-1, App-2, and App-n. The middle layer is the system domain. The bottom level represents protected external resources. It consists of four ovals labeled net I/O, file I/O, AWT, and printer. Four arrows point from the system domain to each of the four external resources.