Thirty Years Later: Lessons from the Multics Security Evaluation.

Paul A. Karger, Roger R. Schell

Browse the full ACSAC paper archive.