"Engineering a Security Kernel for Multics."

Michael D. Schroeder (1975)
a service of Schloss Dagstuhl - Leibniz Center for Informatics