William R. Herndon An Interpretation of Clark-Wilson for Object-Oriented DBMSs. 65-85 1993 conf/dbsec/1993 DBSec db/conf/dbsec/dbsec93.html#Herndon93