A Model for Multilevel Security Based on Operator Nets. - Glenn H. MacEwen; V. W. W. Poon; Janice I. Glasgow (S&P, 1987)