1. A computer-implemented method for remotely verifying integrity of a system, which includes a computer device, comprising: reading an access control policy that sets forth information flows within the system having a plurality of subjects and objects, the plurality of subjects including a plurality of applications, the information flows indicating whether a subject is allowed access to an object based on an integrity level of each; determining a set of trusted subjects from the plurality of subjects in the system that interact with a target application in the system; constructing an information flow graph of the system based on the access control policy and the set of trusted subjects that includes all interfaces into the target application from the plurality of subjects and whether each interface is a filtering interface that discards or upgrades low integrity data or is an unfiltered interface; and measuring, by a party that is remote from the system, program code loaded into the set of trusted subjects to verify that only expected code is executed for a trusted subject of the set of trusted subjects such that all program code that is loaded into the trusted subject is from an untrusted subject via a filtering interface or is via an unfiltered interface from a trusted subject.