D. McCullough

Specifications for Multi-Level Security and a Hook-Up

Daryl McCullough, D. McCullough, 1987, 1987 IEEE Symposium on Security and Privacy.

Detecting Discrepancies and Improving Intelligibility : Two Preliminary Evaluations of RIPTIDES

Claire Cardie, K. Wagstaff, Vincent Ng, 2001 .

A New Approach to Expert System Explanations 1 Expert System Explanation

B. Lavoie, Owen Rambow, Tanya Korelsky, 1998 .

Covert Channels and Degrees of Insecurity

Daryl McCullough, D. McCullough, 1988, CSFW.

Romulus: A Computer Security Properties Modeling Environment, the Theory of Security

Ian Sutherland, Tanya Korelsky, Daryl McCullough, 1991 .

Romulus: A Computer Security Properties Modeling Environment, Mathesis

Ian Sutherland, Tanya Korelsky, Daryl McCullough, 1991 .

A Hookup Theorem for Multilevel Security

Daryl McCullough, D. McCullough, 1990, IEEE Trans. Software Eng..

Security modeling in the Ulysses environment

Garrel Pottinger, Owen Rambow, James Hook, 1988, [Proceedings 1988] Fourth Aerospace Computer Security Applications.

Noninterference and the composability of security properties

Daryl McCullough, D. McCullough, 1988, Proceedings. 1988 IEEE Symposium on Security and Privacy.