Jonathan S. Shapiro John Vanderburgh Access and Integrity Control in a Public-Access, High-Assurance Configuration Management System. 109-120 2002 conf/uss/2002 USENIX Security Symposium http://www.usenix.org/publications/library/proceedings/sec02/shapiro.html db/conf/uss/uss2002.html#ShapiroV02