Protection and the Control of Information Sharing in Multics (1974)

by J H Saltzer
Venue:Communications of the ACM