ACM - Normas
Harry J. Saal
Israel Gat
Proceedings of the 5th annual symposium on Computer architecture - ISCA ’78
Unified Exposition and MULTICS Interpretation, ESD-TR-75-306, Electronic Systems Division, AFSC, Hanscom Field, Bedford, Mass
Programming semantics for multiprogrammed computations
A lattice model of secure information flow
A Programmer's Viewpoint, Software Practice and Experience 6,4 (October- December 1976), 463-471
The enforcement of security policies for computation