Modeling of information-flow restrictions