1. A Channel that allows the violation of the security policy governing an information system (IS) and is usable or detectable by subjects external to the trusted computing base. 2. Any channel that is usable or detectable by subjects external to the Trusted Computing Base.