A new notion of security boundary is introduced to model multilevel security policies in the scenario of mobile systems, within Cardelli and Gordon's "pure" mobile ambients calculus. Information leakage may be expressed in terms of the possibility for a hostile ambient to access con