Using Type Enforcement to Assure a Configurable Guard. - P. Greve; J. Hoffman; R. E. Smith (ACSAC, 1997)

Implementing RBAC on a Type Enforced System. - J. Hoffman (ACSAC, 1997)

A Practical Notation for Object Oriented Analysis with a Formal Meaning. - J. Hoffman (TOOLS (25), 1997)