Relating Bell-LaPadula-Style Security Models to Information Models. - Ian Sutherland (CSFW, 1988)

Deducibility Security with Dynamic Level Assignment. - Ian Sutherland; Stanley Perlo; Rammohan Varadarajan (CSFW, 1989)

Model Checking and Fault Tolerance. - Glenn Bruns; Ian Sutherland (AMAST, 1997)

Features as Service Transformations. - Glenn Bruns; Peter Mataga; Ian Sutherland (FIW, 1998)