On the Design of a Provably Secure Operating System (1974)

by P Neumann
Venue:International Workshop on Protection in Operating Systems, IRIA