Separability and Security Models,
C. T. Sennett, MacDonald, R · Defense Technical Information Center (DTIC) · 1987
This report presents a review of security models and gives a detailed mathematical description of the property of separability, that is the property that certain software can be treated as though it were being obeyed in isolated computers. The description uses the specification language Z, and the proofs required are given in detail.