Abstract: With the rapid development of Internet, the security problems have become more important. Computer operating system is the basis of information system security. But traditional operating systems lack sufficient and flexible mechanisms for application specific security policy of distributed system. In this paper, an architecture of dedicated secure operating system is proposed. User can define process specific security policy in a high level event based specification language regardless of low level details, so the system will have good adaptability and extensibility.