Proving Multilevel Security of a System Design.

Richard J. Feiertag, Karl N. Levitt, Lawrence Robinson

Browse the full SOSP paper archive.