Lattice-based access control models
Security Policies and Security Models