Formal Models for Computer Security
Carl E. Landwehr · ACM Computing Surveys · 1981
Efforts to build "secure " computer systems have now been underway for more than a decade. Many designs have been proposed, some prototypes have been constructed, and a few systems are approaching the production stage. A small number of systems are even operating in what the Department of Defense calls the "multilevel " mode some