John P. McDermott The b²/c³ Problem: How Big Buffers Overcome Convert Channel Cynicism in Trusted Database Systems. 111-122 1994 conf/dbsec/1994 DBSec db/conf/dbsec/dbsec94.html#McDermott94