"Specification and Verification of the UCLA Unix Security Kernel."

Bruce J. Walker, Richard A. Kemmerer, Gerald J. Popek (1980)
a service of  Schloss Dagstuhl - Leibniz Center for Informatics