L. J. L. Padula

Secure Computer System: Unified Exposition and Multics Interpretation

D. Elliott Bell, Leonard J. La Padula, D. E. Bell, 1976 .