A decentralized model for information flow control

Myers, Andrew C., Liskov, Barbara · Proceedings of the sixteenth ACM symposium on Operating systems principles · 1997