Design for Multics Security Enhancements
Jerold Whitmore, Andre Bensoussan, Paul Green, D. Hunt, Andrew Kobziar · 1973
Abstract : The results of a 1973 security study of the Multics computer system are presented detailing requirements for a new access control mechanism that would allow two levels of classified data to be used simultaneously on a single Multics system. The access control policy was derived from the Department of Defense Information Security Program. The design decisions presented were the basis for subsequent security enhancements to the Multics system.