A Multilevel Relational Data Model. - Dorothy E. Denning; Teresa F. Lunt; Roger R. Schell; Mark R. Heckman; William R. Shockley (S&P, 1987)

A near-term design for the SeaView multilevel database system. - Teresa F. Lunt; Roger R. Schell; William R. Shockley; Mark R. Heckman; Dan Warren (S&P, 1988)

Element-level classification with A1 assurance. - Teresa F. Lunt; Dorothy E. Denning; Roger R. Schell; Mark R. Heckman; William R. Shockley (Comput. Secur., 1988)

The SeaView Security Model. - Teresa F. Lunt; Dorothy E. Denning; Roger R. Schell; Mark R. Heckman; William R. Shockley (IEEE Trans. Software Eng., 1990)

Is the Reference Monitor Concept Fatally Flawed? The Case for the Negative. - William R. Shockley; James P. Downey (S&P, 1997)

A Multi-Threading Architecture for Multilevel Secure Transaction Processing. - Haruna R. Isa; William R. Shockley; Cynthia E. Irvine (S&P, 1999)