The security kernel approach to secure operating systems. - Bruce Chittenden; Paul J. Higgins (ACM Southeast Regional Conference, 1979)