"Least Privilege in Separation Kernels."

Timothy E. Levin, Cynthia E. Irvine, Thuy D. Nguyen (2006)
a service of Schloss Dagstuhl - Leibniz Center for Informatics