Ajay Chander Drew Dean John C. Mitchell A Distributed High Assurance Reference Monitor. 231-244 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=3225&spage=231 2004 conf/isw/2004 ISC db/conf/isw/isc2004.html#ChanderDM04