The Protection of Information in Computer Systems (1975)

by Jerome H. Saltzer, Michael D. Schroeder