Bell-La Padula Properties

Simple security property: A subject s may have read access to an object o only if C(o) <= C(s). Where C() is the clearance of some object or subject.
*-property: A subject s who has read access to an object o may have write access to object p only if C(o)<=C(p).
Deals with disclosure of information but doesn't explicitly handle integrity.

Simple security property: A subject s may have read access to an object o only if C(o) <= C(s). Where C() is the clearance of some object or subject.