Selectively Defined Subsystems
Dorothy E. Denning, Peter J. Denning, G. Scott Graham · Purdue e-Pubs (Purdue University System) · 1974
The implementation of programming systems that cannot leak confidential information Is examined. Unless severe restrictions are placed on their form, programs of such systems cannot even be permitted to output apparently nonconfldential information unless they have been proved error-free.