# Information flow models

Authorization is applied to data flows.

* **Considering the data flow source and destination.**
* Goal: avoid unwanted/dangerous information flows.

<figure><img src="https://3490214077-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAHT7avzIVwxfPJ4pkhhO%2Fuploads%2FibvvtPht65F4QU7jb35o%2FScreenshot%20from%202024-02-22%2010-35-21.png?alt=media&#x26;token=1ff122b1-1bd2-4432-b57d-d5440e97a46c" alt=""><figcaption></figcaption></figure>

Src and Dst security-level attributes.

* **Information flows should occur only between entities with given security-level (SL) attributes.**
* Authorization is given based on the SL attributes.
