Matt Bishop
Research Institute for Advanced Computer Science, NASA Ames Research Center, Moffett Field, CA
Specification and verification of the UCLA Unix security kernel
Communications of the ACM
Operating system penetration
AFIPS '75 Proceedings of the May 19-22, 1975, national computer conference and exposition