A Model-Theoretic Approach to Specifying, Verifying and Hooking Up Security Policies.

Leo Marcus Timothy Redmond A Model-Theoretic Approach to Specifying, Verifying and Hooking Up Security Policies. 127-138 1988 CSFW db/conf/csfw/csfw1988.html#MarcusR88