[Millen76] Millen, J. K. Security Kernel Validation in Practice, Communications of the ACM, vol. 19, no. 5 (May 1976), pp. 243-250. []