Security model development environment. - Jody Heaney; Marc Adkins; Gary Dolsen; John Page (ACSAC, 1989)