In which of the following security models is the subject's clearance compared to the object's classification such that specific rules can be applied to control...