Original: Subjects and objects each have a set of security attributes.
Simplified: Subjects and objects each have a set of security rules.