Codie Wells
Key Logic, 5200 Great America Parkway, Santa Clara, CA
Protection imperfect: the security of some computing environments
ACM SIGOPS Operating Systems Review
On security in capability-based systems