Security is always a hot topic with the development of computer technologies. Currently, mechanisms like active defense, detection and anti-detection are proposed. They could be implemented on different levels such as application-level and kernel-level in the system. We manage to go to the system-level. Linux owns mature security-enhanced version SELinux. For Windows, we focus on mandatory access control and propose a mechanism with improved efficiency, compatibility and stability.