Structured specification of a Security Kernel. - Kenneth G. Walter; Samuel I. Schaen; William F. Ogden; William C. Rounds; D. G. Shumway; D. D. Schaeffer; K. J. Biba; Franklyn T. Bradshaw; S. R. Ames; J. M. Gilligan (Reliable Software, 1975)

Procedure semantics and language definition. - Franklyn T. Bradshaw; George W. Ernst; Raymond J. Hookway; William F. Ogden (ACM SIGPLAN Notices, 1980)

Use of data abstraction in process specification. - Franklyn T. Bradshaw; George W. Ernst; Raymond J. Hookway (ACM SIGSOFT Softw. Eng. Notes, 1982)