The seaview security model (1990)

by L Lunt, D Denning, R Schell, M Heckman, W Shockley
Venue:IEEE Transactions on Software Engineering