David Bell and Len LaPadula create the Bell-LaPadula Security Policy Model in response to US Airforce converns over the security of time sharing mainframe systems. The Bell-LaPadula model is a formal state transition model of computer security that describes a set of access control rules.

A system is defined as "secure" when all access controls are in accordance with a specific security policy.