The Implementation of Secure Entity-Relationship Databases. - Burton H. Patkau; David L. Tennenhouse (S&P, 1985)