the state machine model describes a system that is always secure no matter what state it is in. a secure state machine model system always boots into a secure state, maintains a secure state across all transitions, and allows subjects to access resources only in a secure manner compliant with the security policy. which security models are built on a state machine model?