The Clark-Wilson Model.

Which security model prevents unauthorized users from making modifications, prevents authorized users from making improper modifications, and maintains internal and external consistency (ie. reinforces separation of duties)? - The Bell-LaPadula Model - The Biba Model - The Clark-Wilson Model - The Brewer-Nash Model