@inproceedings{SOSP-1981-Rushby,
	author        = "John M. Rushby",
	booktitle     = "{Proceedings of the Eighth Symposium on Operating System Principles}",
	doi           = "10.1145/800216.806586",
	isbn          = "0-89791-062-1",
	pages         = "12--21",
	publisher     = "{ACM}",
	title         = "{Design and Verification of Secure Systems}",
	year          = 1981,
}