Is invoked for every access attempt
Is impossible to circumvent and be foolproof
Is complete, verified, and tested
Bell-LaPadula Enforces confidentiality and uses three rules: the simple security rule, the * property, and the strong star rule.
Biba Integrity model that has two basic rules: "no write up" and "no read down."
Clark-Wilson Integrity model with three goals: maintaining consistency, preventing unauthorized access, and preventing improper modification. Makes use of an access triple through a restricted interface.
Noninterference Prevents a subject or process from one sensitivity level from affecting subjects or process at other sensitivity levels.