MILS-based information flow control in the avionic domain: A case study on compositional architecture and verification Conference Paper