John E. Dobson John A. McDermid Security Models and Enterprise Models. 1-39 1988 DBSec db/conf/dbsec/dbsec88.html#DobsonM88