The Safe-Tcl Security Model,” technical report (1996)

by J Ousterhout, J Levy, B Welch