1. A.K. Jones , R.J. Lipton , and L. Snyder . 1976. A linear time algorithm for deciding security , Proceedings 17th Annual FOCS Conference , pages 33 - 41 . A.K. Jones, R.J. Lipton, and L. Snyder. 1976. A linear time algorithm for deciding security, Proceedings 17th Annual FOCS Conference, pages 33-41.
2. Formal Models of Capability-Based Protection Systems
3. Conspiracy and information flow in the Take-Grant Protection Model
4. A. M. Mettler and D. Wagner . 2006 . The Joe-E language specification (draft). Technical Report UCB/EECS-2006-26, University of California , Berkeley . A. M. Mettler and D. Wagner. 2006. The Joe-E language specification (draft). Technical Report UCB/EECS-2006-26, University of California, Berkeley.
5. A Practical Formal Model for Safety Analysis in Capability-Based Systems