Incremental Assurance for Multilevel Applications. - Dan Thompson; M. Denz (ACSAC, 1997)