Reverification of a microprocessor. - Stephen D. Crocker; Eve Cohen; Sue Landauer; Hilarie Orman (S&P, 1988)

Models for coalition-based access control (CBAC). - Eve Cohen; Roshan K. Thomas; William H. Winsborough; Deborah Shands (SACMAT, 2002)