Sean Peisert
Matt Bishop
Keith Marzullo
ACM SIGOPS Operating Systems Review
Toward a normative approach for forensicability