A lattice model of secure information flow
Denning, Dorothy E. · Communications of the ACM · 1976