A Technique for Proving Specifications Are MultiLevel Secure (1980)

by R J Feiertag
Venue:Menlo Park, Calif.: SRI Computer Science Laboratory