Landwehr, C., Heitmeyer, C., and McLean, J. ``A Security Model for Military Message Systems,'' ACM Transactions on Computer Systems, vol. 2, no. 3, Aug. 1984.