A formal, mathematical description of access control that describes how security can be maintained by comparing the clearance of a subject with the classification of an object to determine ...