Leonard J. LaPadula
-
A policy flexible architecture for secure operating system
ACM SIGOPS Operating Systems Review