Security models are formal representations of security policies. They use mathematical and logical formulas to map requirements to computing environments.