maps the abstract goals of a security policy to a computer system terms and concepts
an abstraction that provides a conceptual language for admins to sepecify security policy ex. top secret
defines and classifies threats to processes and communication channels and supports design of systems able to resist them