"Protection and the Control of Information Sharing in MULTICS."

Jerome H. Saltzer (1973)
a service of Schloss Dagstuhl - Leibniz Center for Informatics