The Bell-LaPadula model [of multilevel security and mandatory access control] was a big deal, … else, and that confidentiality is based on a … [such as top-secret]. Two, it ignores the problem of how to manage classifications. … never changes. In the physical world, classifications change … And three, sometimes users need to work with … cargo of Q bombs might be classified at … cargo. [p. 127]
Google-1
Google-2
Copyright clearance needed for quotation.