Verifying a Hardware Security Architecture. - Joshua D. Guttman; H.-P. Ko (S&P, 1990)