Elisa Bertino Barbara Catania Elena Ferrari A nested transaction model for multilevel secure database management systems. 321-370 2001 4 ACM Trans. Inf. Syst. Secur. 4 http://doi.acm.org/10.1145/503339.503340 db/journals/tissec/tissec4.html#BertinoCF01