Secure computer systems: Uni exposition and Multics interpretation (1976)

by D E Bell, L J LaPadula