Secure computer system: Unified exposition and multics interpretation (1976)

by D E Bell, L J LaPadula