Traducement: A model for record security. - Tom Walcott; Matt Bishop (ACM Trans. Inf. Syst. Secur., 2004)