1. National Computer Security Center (NCSC). (1987). A guide to understanding discretionary
access control in trusted system, Report NSCD-TG-003 Version1, 30 September 1987.
2. Osborn, S. (1997). Mandatory access control and role-based access control revisited. In Proceedinds of the 2nd ACM Workshop on Role-Based Access Control, RBAC 1997 (pp. 31–40). ACM.
3. Samarati, P., & Vimercati, S. (2000). Access control policies, models, and mechanisms. In
FOSAD: International School on Foundations of Security Analysis and Design (pp. 137–196).
4. Sandhu, R. S., Coyne, E. J., Feinstein, H. I., & Youman, C. (1996). Role-based access control
models. IEEE Computer, 38–47.
5. Ferraiolo, D., & Kuhn, R. (1992). Role-based access control. In 15th National Computer Security Conference (pp. 554–563).