Cristi Garvey Thomas H. Hinke Nancy R. Jensen Jane Solomon Amy Wu A Layered TCB Implementation versus the Hinke-Schaefer Approach. 151-165 1989 DBSec db/conf/dbsec/dbsec89.html#GarveyHJSW89