[Feiertag79] R. Feiertag and P. Neumann, The foundations of a Provable Secure Operating System (PSOS), AIFIPS, National Computer Conference, 329-334, 1979 []