A new security testing method and its application to the secure xenix kernel (1987)

by V D Gligor, C S Chandersekaran, W Jiang, A Johri, G L Luchenbaugh, L E Reich
Venue:IEEE Transactions on Software Engineering