"Security Kernel Validation in Practice."

Jonathan K. Millen (1976)
a service of  Schloss Dagstuhl - Leibniz Center for Informatics