With the BLP model, access permissions are defined through:

A.
Filter rules

B.
Security labels

C.
Access Control matrix

D.
Profiles

Explanation:
Bell-LaPadula is a state machine model capturing confidentiality aspects of access
control. Access permissions are defined through an Access Control matrix and through a
partial ordering of security levels. Security policies prevent information flowing
downwards from a high security level to a low security level. BLP only considers the

information flow that occurs when a subject observes or alters an object.