Jonathan Seldin

Romulus: A Computer Security Properties Modeling Environment. Volume 2B. MATHESIS

Ian Sutherland, Tanya Korelsky, Daryl McCullough, 1991 .

Romulus: A Computer Security Properties Modeling Environment Overview. Volume 1.

Ian Sutherland, Tanya Korelsky, Daryl McCullough, 1991 .

Security modeling in the Ulysses environment

Garrel Pottinger, Owen Rambow, James Hook, 1988, [Proceedings 1988] Fourth Aerospace Computer Security Applications.

Romulus: A Computer Security Properties Modeling Environment. Volume 2A. The Theory of Security

Ian Sutherland, Tanya Korelsky, Daryl McCullough, 1991 .

Mathesis: The Mathematical Foundation of Ulysses.

Jonathan Seldin, J. Seldin, 1987 .