Secure computer systems: Unified exposition and multics interpretation (1976)

by D E BELL, L J LAPADULA