[Snyder81] L. Snyder, Formal Models of Capability-Based Protection Systems, IEEE Transactions on Computers, Vc-30n3, March, 1981 [This paper looks at formal models for capability-based access control systems and formulates a graph-theoretic analysis of access rights based on the Harrison-Ruzzo-Ulman model of subject/object access control.]