1. A computer-implemented method for remotely verifying integrity of a system, comprising: reading an access control policy that sets forth information flows within the system; determining a set of trusted subjects that interact with a target application in the system; constructing an information flow graph of the system based on the access control policy and the set of trusted subjects; and measuring program code loaded into the set of trusted subjects.