What is the name of the first mathematical model of a multi-level security policy used to define the concept of a secure state, the modes of access, and rules f...