L. Robinson
Stanford Research Institute, Menlo Park, CA
On attaining reliable software for a secure operating system
Proceedings of the international conference on Reliable software