Generators info

The tranquility principle of the Bell-LaPadula model states that the classification of a subject or object does not change while it is being referenced.

There are two forms to the tranquility principle:

1) The “principle of strong tranquility” states that security levels do not change during the lifetime of the system

2) The “principle of weak tranquility” states that security levels do not change in a way that violates the rules of a given security policy.