James P. O'Connor Trusted RUBIX: A Multilevel Secure Client-Server DBMS. 123-136 1994 conf/dbsec/1994 DBSec db/conf/dbsec/dbsec94.html#OConnor94