The trusted path between SMITE and the user. - Simon R. Wiseman; Phil Terry; Andrew Wood; Clare Harrold (S&P, 1988)

A "New" Security Policy Model. - Phil Terry; Simon R. Wiseman (S&P, 1989)