Duane E. Olawsky Charles Payne Thomas Sundquist David Apostal Todd Fine Using Composition to Design Secure, Fault-Tolerant Systems. 29- 1998 conf/hase/1998 HASE http://dlib.computer.org/conferen/hase/9221/pdf/92210029.pdf db/conf/hase/hase1998.html#OlawskyPSAF98