Abstract: This paper presents a formal approach to specify security model based on the theory of finite state machine（FSM） and the concept of communicating sequential process （CSP）. In this approach, FSM is used to specify the architecture and the control parts of a system, and CAP is used to specify the states’transition. A security model is given as an example of multilevel security policy with this approach.