Enforcing and maintaining security is a longstanding priority in computer systems. Two properties of security are confidentiality and integrity. Confidentiality is verifying that private data is unread by entities that should not be able to access it. Integrity is verifying that data comes from a trusted source and has not been modified by an untrusted source. I have created an approach called Carapace that enforces confidentiality and integrity using information flow control.