"Cost profile of a highly assured, secure operating system."

Richard E. Smith (2001)
a service of Schloss Dagstuhl - Leibniz Center for Informatics