Trusted RUBIX architecture and policy model interpretation. - C. J. Testa; B. D. Wilner; Virgil D. Gligor (ACSAC, 1992)