1. Amman, P. E. and Sandhu, R. S. “Extending the Creation Operation in the Schematic Protection Model,” Proc. Sixth Annual Computer Security Applications Conference, 1990, pp. 340–348.
2. Amman, P. E. and Sandhu, R. S. “Implementing Transaction Control Expressions by Checking for Absence of Access Rights,” Proc. Eighth Annual Computer Security Applications Conference, San Antonio (Texas, USA), December 1992, pp. 131–140.
3. Bishop, M. and Snyder, L. “The Transfer of Information and Authority in a Protection System,” Proc. of the Seventh Symposium on Operating Systems Principles, Pacific Grove, California (USA), December 10–12, 1979, SIGOPS (ACM), pp. 45–54.
4. Biskup, J. “Some Variants of the Take-Grant Protection System”, Information Processing Letters, 19, 1984, pp. 151–156.
5. Dacier, M., Deswarte, Y. and Kaâniche, M. “A Framework for Security Assessment of Insecure Systems,” Predictably Dependable Computing Systems (PDCS-2), First Year Report, ESPRIT Project 6362, September 1993, pp. 561–578.