Maurice Herlihy Jeannette M. Wing Specifying Security Constraints with Relaxation Lattices. 47-53 1989 CSFW db/conf/csfw/csfw1989.html#HerlihyW89