Edgar H. Sibley Gary W. Smith On the Behavior of Multilevel Database Systems. 205-220 1990 DBSec db/conf/dbsec/dbsec90.html#SibleyS90