Which of the following is a state machine model capturing confidentiality aspects of access
control?

A.
Clarke Wilson

B.
Bell-LaPadula

C.
Chinese Wall

D.
Lattice

Explanation:
Bell-LaPadula is a state machine model capturing confidentiality aspects of access
control. Access permissions are defined through an Access Control matrix and through a
partial ordering of security levels. Security policies prevent information flowing
downwards from a high security level to a low security level. BLP only considers the
information flow that occurs when a subject observes or alters an object.