Formal Verification of an Operating System Security Kernel (1982)

by R A Kemmerer
Venue:UMI Research Press, Ann Arbor