Security policies

New directions in cryptography

Diffie, W., & Hellman, M. (1976) · IEEE Transactions on Information Theory · doi:10.1109/tit.1976.1055638 · Cited by 14,713 · see citing works

Using encryption for authentication in large networks of computers

Needham, R. M., & Schroeder, M. D. (1978) · Communications of the ACM · doi:10.1145/359657.359659 · Cited by 2,358 · see citing works

Security Policies and Security Models

Goguen, J. A., & Meseguer, J. (1982) · 1982 IEEE Symposium on Security and Privacy · doi:10.1109/sp.1982.10014 · Cited by 2,119 · see citing works

A field study of the software design process for large systems

Curtis, B., Krasner, H., & Iscoe, N. (1988) · Communications of the ACM · doi:10.1145/50087.50089 · Cited by 2,076 · see citing works

A lattice model of secure information flow

Denning, D. E. (1976) · Communications of the ACM · doi:10.1145/360051.360056 · Cited by 1,907 · see citing works

Decentralized Trust Management

Blaze, M., Feigenbaum, J., & Lacy, J. (1996) · Cited by 1,834 · see citing works

IEEE Symposium on Security and Privacy

(2023) · IT Professional · doi:10.1109/mitp.2023.3246667 · Cited by 1,180 · see citing works

The Resurrecting Duckling: Security Issues for Ad-hoc Wireless Networks

Stajano, F., & Anderson, R. (2000) · Lecture notes in computer science · doi:10.1007/10720107_24 · Cited by 1,164 · see citing works

Protection in operating systems

Harrison, M. A., Ruzzo, W. L., & Ullman, J. D. (1976) · Communications of the ACM · doi:10.1145/360303.360333 · Cited by 1,057 · see citing works

Secure Computer Systems: Mathematical Foundations

Bell, D. E., & LaPadula, L. J. (1973) · Defense Technical Information Center (DTIC) · Cited by 1,017 · see citing works

SPKI Certificate Theory

Ellison, C. M., Frantz, B., Lampson, B., Rivest, R. L., Thomas, B., & Ylönen, T. (1999) · doi:10.17487/rfc2693 · Cited by 770 · see citing works

Encyclopedia of software engineering

(1994) · Choice Reviews Online · doi:10.5860/choice.32-0639 · Cited by 706 · see citing works

Role-Based Access Controls

Ferraiolo, D. F., & Kuhn, D. R. (1992) · Cited by 662 · see citing works

Computer Security Technology Planning Study

Anderson, J. P. (1972) · Cited by 660 · see citing works

The KeyNote Trust-Management System Version 2

Blaze, M., Joan Feigenbaum, A., Ioannidis, J., & Keromytis, A. D. (1999) · doi:10.17487/rfc2704 · Cited by 656 · see citing works

SDSI - A Simple Distributed Security Infrastructure

Lampson, B., & Rivest, R. L. (1996) · Cited by 480 · see citing works

1987 IEEE Symposium on Security and Privacy

(1986) · Computer · doi:10.1109/mc.1986.1663102 · Cited by 457 · see citing works

Proceedings 2002 IEEE Symposium on Security and Privacy

(2002) · doi:10.1109/secpri.2002 · Cited by 384 · see citing works

Why cryptosystems fail

Anderson, R. (1994) · Communications of the ACM · doi:10.1145/188280.188291 · Cited by 358 · see citing works

Proceedings of IEEE Symposium on Research in Security and Privacy

(1993) · IEEE Computer Society Symposium on Research in Security and Privacy · doi:10.1109/risp.1993.287648 · Cited by 309 · see citing works

Security controls in the ADEPT-50 time-sharing system

Weissman, C. (1969) · AFIPS Fall Joint Computer Conference (FJCC) · doi:10.1145/1478559.1478574 · Cited by 158 · see citing works

A pump for rapid, reliable, secure communication

Kang, M. H., & Moskowitz, I. S. (1993) · Proceedings of the ACM Conference on Computer and Communications Security · doi:10.1145/168588.168604 · Cited by 142 · see citing works

A Security Policy Model for Clinical Information Systems

Anderson, R. (1996) · Cited by 140 · see citing works

LOMAC: Low Water-Mark integrity protection for COTS environments

Fraser, T. (2002) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/secpri.2000.848460 · Cited by 113 · see citing works

A hookup theorem for multilevel security

McCullough, D. (1990) · IEEE Transactions on Software Engineering · doi:10.1109/32.55085 · Cited by 113 · see citing works

Scomp: A Solution to the Multilevel Security Problem

Fraim (1983) · Computer · doi:10.1109/mc.1983.1654440 · Cited by 103 · see citing works

A comment on the ‘basic security theorem’ of Bell and LaPadula

McLean, J. (1985) · Information Processing Letters · doi:10.1016/0020-0190(85)90065-1 · Cited by 97 · see citing works

The nature of a useable PKI

Ellison, C. M. (1999) · Computer Networks · doi:10.1016/s1389-1286(98)00018-8 · Cited by 62 · see citing works

Privacy in clinical information systems in secondary careCommentary: Let's discuss wider social and professional issuesCommentary: Organisational and cultural aspects are also important

Denley, I., Gardner, M., O'Conor, R., & Smith, S. W. (1999) · BMJ · doi:10.1136/bmj.318.7194.1328 · Cited by 42 · see citing works

BLACKER: security for the DDN examples of A1 security engineering trades

Weissman, C. (2003) · IEEE Computer Society Symposium on Research in Security and Privacy · doi:10.1109/risp.1992.213253 · Cited by 36 · see citing works

Aggregation and Separation as Noninterference Properties

Foley, S. N. (1992) · Journal of Computer Security · doi:10.3233/jcs-1992-1203 · Cited by 31 · see citing works

KSOS—Development methodology for a secure operating system

Berson, T. A., & Barksdale, G. L. (1979) · International Workshop on Managing Requirements Knowledge (MARK) · doi:10.1109/mark.1979.8817195 · Cited by 31 · see citing works

Starlight: Interactive Link

Anderson, M., North, C., Griffin, J., Milner, R., Yesberg, J., & Yiu, K. (2002) · Annual Computer Security Applications Conference · doi:10.1109/csac.1996.569669 · Cited by 30 · see citing works

A High Assurance Window System Prototype1

Epstein, J., McHugh, J., Orman, H. K., Pascale, R., Marmor-Squires, A., Danner, B., Martin, C. R., Branstad, M., Benson, G. S., & Rothnie, D. (1993) · Journal of Computer Security · doi:10.3233/jcs-1993-22-306 · Cited by 25 · see citing works

Preliminary Notes on the Design of Secure Military Computer Systems.

Schell, R. R., Downey, P. J., & Popek, G. J. (1973) · Defense Technical Information Center (DTIC) · Cited by 21 · see citing works

A New Mandatory Security Policy Combining Secrecy and Integrity

Karger, P. A., Austel, V., & Toll, D. C. (2000) · Cited by 19 · see citing works

A Distributed Secure System

Rushby, J., & Randell, B. (1983) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.1983.10019 · Cited by 18 · see citing works

Computer Security: the Achilles' Heel of the Electronic Air Force?

Schell, R. R. (2013) · Air & Space Power Journal · Cited by 16 · see citing works

The formal specification of safety requirements for storing explosives

Mukherjee, P., & Stavridou, V. (1993) · Formal Aspects of Computing · doi:10.1007/bf01212405 · Cited by 16 · see citing works

An architecture for multilevel secure interoperability

Kang, M. H., Froscher, J. N., & Moskowitz, I. S. (2002) · Annual Computer Security Applications Conference · doi:10.1109/csac.1997.646190 · Cited by 15 · see citing works

Private desktops and shared store

Pomeroy, B., & Wiseman, S. R. (2002) · Annual Computer Security Applications Conference · doi:10.1109/csac.1998.738618 · Cited by 15 · see citing works

A case study of two NRL Pump prototypes

Kang, M. H., Moskowitz, I. S., Montrose, B., & Parsonese, J. J. (2002) · Annual Computer Security Applications Conference · doi:10.1109/csac.1996.569667 · Cited by 9 · see citing works

Jikzi: A New Framework for Secure Publishing

Anderson, R., & Lee, J. (2000) · Lecture notes in computer science · doi:10.1007/10720107_4 · Cited by 7 · see citing works

User interface for a high assurance, windowing system

Epstein, J., & Pascale, R. (2002) · Annual Computer Security Applications Conference · doi:10.1109/csac.1993.315434 · Cited by 5 · see citing works

Technical Rationale Behind CSC-STD-003-85: Computer Security Requirements

US Department of Defense (1985) · Palgrave Macmillan UK eBooks · doi:10.1007/978-1-349-12020-8_7 · Cited by 4 · see citing works

Simple assured bastion hosts

Cant, C., & Wiseman, S. R. (2002) · Annual Computer Security Applications Conference · doi:10.1109/csac.1997.646170 · Cited by 3 · see citing works

Implementing security policy in a large defence procurement

Nash, M. J., & Kennett, R. J. (2002) · Annual Computer Security Applications Conference · doi:10.1109/csac.1996.569665 · Cited by 2 · see citing works

CMW Introduction

Huber, G. (1994) · ACM SIGSAC Review · doi:10.1145/190748.190750 · Cited by 2 · see citing works

Designing a reliable publishing framework

Lee, J. (2021) · OpenGrey (Institut de l'Information Scientifique et Technique) · doi:10.48456/tr-489 · Cited by 1 · see citing works

Docker container security via heuristics-based multilateral security-conceptual and pragmatic study

Manu, A. R., Patel, J. K., Akhtar, S., Agrawal, V. K., & Murthy, K. N. B. S. (2016) · International Conference on Circuit, Power and Computing Technologies · doi:10.1109/iccpct.2016.7530217 · Cited by 44 · see citing works

Security for Whom? The Shifting Security Assumptions of Pervasive Computing

Stajano, F. (2003) · Lecture notes in computer science · doi:10.1007/3-540-36532-x_2 · Cited by 22 · see citing works

Improved multilevel security with latent semantic indexing

Thorleuchter, D., & den Poel, D. V. (2012) · Expert Systems with Applications · doi:10.1016/j.eswa.2012.06.002 · Cited by 21 · see citing works

Defeating Prompt Injections by Design

Debenedetti, E., Shumailov, I., Fan, T., Hayes, J., Carlini, N., Fabian, D., Kern, C., Shi, C., Terzis, A., & Tramèr, F. (2026) · 2026 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml68715.2026.00040 · Cited by 15 · see citing works

Modeling Chinese wall access control using formal concept analysis

Mouliswaran, S. C., Kumar, C. A., & Chandrasekar, C. (2014) · International Conference on Contemporary Computing and Informatics (IC3I) · doi:10.1109/ic3i.2014.7019619 · Cited by 9 · see citing works

Modeling XACML Security Policies Using Graph Databases

Diez, F. P., Vasu, A. C., Suárez, D., & Camara, J. M. S. (2017) · IT Professional · doi:10.1109/mitp.2017.4241465 · Cited by 6 · see citing works

Information Security Inside Organizations - A Positive Model and Some Normative Arguments Based on New Institutional EconomicsPreprint

Pallas, F. (2009) · SSRN Electronic Journal · doi:10.2139/ssrn.1471801 · Cited by 6 · see citing works

Representation of multiple domain role based access control using FCA

Mouliswaran, S. C., Kumar, C. A., & Chandrasekar, C. (2015) · International Conference on Electrical, Computer and Communication Technologies (ICECCT) · doi:10.1109/icecct.2015.7226062 · Cited by 4 · see citing works

Applied dynamic policy selection

Reimair, F., Prünster, B., Reiter, A., & Ertler, C. (2016) · IEEE Conference on Communications and Network Security · doi:10.1109/cns.2016.7860542

Community-Based Identification in Rural Banking.

Kwaa-Aidoo, E. K. (2017) · Pentvars Business Journal · doi:10.62868/pbj.v11i1.143

Community-Based Identification in Rural Banking

Kwaa-Aidoo, E. K. (2017) · Pentvars Business Journal · doi:10.62868/pbj.v11i2.148

Development of security policies

Ølnes, J. (1994) · Computers & Security · doi:10.1016/0167-4048(94)90042-6 · Cited by 37 · see citing works

Computer security policies: personnel security

Smith, M. R., & Brampton, R. A. F. (1993) · Information Security

Security policies inadequate

(1998) · Computer Fraud & Security · doi:10.1016/s1361-3723(98)90079-3

Security policy

(2007) · Routledge eBooks · doi:10.4324/9780080512549-18

Advances in computer system security

H, H. (1983) · Computers & Security · doi:10.1016/0167-4048(83)90042-1 · Cited by 2 · see citing works