Dorothy E. Denning A Lattice Model of Secure Information Flow. 236-243 1976 19 Commun. ACM 5 db/journals/cacm/cacm19.html#Denning76