TCB subset architecture. - Linda L. Vetter (ACSAC, 1989)

TCB subsets: the next step. - Linda L. Vetter; Gordon Smith; Teresa F. Lunt (ACSAC, 1989)

Architecture for an embedded secure data base management system. - Cynthia E. Irvine; Roger R. Schell; Linda L. Vetter (ACSAC, 1990)