A lattice model of secure information flow (1976)

by D E Denning
Venue:Communications of the ACM (CACM