Principles of Proving Programs Correct in Gypsy. - Donald I. Good; Richard M. Cohen; James G. Keeton-Williams (POPL, 1979)

Demonstrating Security for Trusted Applications on a Security Kernel Base. - Stanley R. Ames Jr.; James G. Keeton-Williams (S&P, 1980)

A practical verification system. - James G. Keeton-Williams; Anne-Marie G. Discepolo (ACM SIGSOFT Softw. Eng. Notes, 1981)