Information-flow Control


Simple rule: don't advertise routes
 from one peer to other peers.



   Expressing constraints: Denning's lattice model