Information flows up, not down
- "Writes up" allowed, "writes down" disallowed
Property (Step 1)
-Subject s can write and s has permission to write o
note: combines mandatory control (relationship of security levels) and discretionary control (the required permission)
sometimes called "no writes down" rule