Jonathan K. Millen Covert Channel Capacity. 60-66 1987 conf/sp/1987 IEEE Symposium on Security and Privacy db/conf/sp/sp1987.html#Millen87