In the construction of information security system, the security model is needed to accurately describe the relationship between important aspects of security and system behavior.