Security test and evaluation for multilevel-mode accreditation: Lessons learned. - Deborah J. Bodeau; Nancy R. Brusil; Irene N. Chang; Mary Jo Reece (ACSAC, 1992)