Ravi S. Sandhu The NTree: A Two Dimension Partial Order for Protection Groups. 197-222 1988 6 ACM Trans. Comput. Syst. 2 http://doi.acm.org/10.1145/42186.42187 db/journals/tocs/tocs6.html#Sandhu88