The University of SydneyPage 23Bell-La PadulaModel–In a large organization it would be extremely difficult to keep track of who has access to which.–Build a latticefollowing dominance relationship.–Direction of the arrow illustrates the dominance. X ßY means X dominates Y.•“A path from X to Y means Information flow is allowed between X and Y”•Information flow is controlled according to the security model, e.g.Bell-La PadulaModel[A,B,C][A,B][A,C][B,C][A][B][C][-]