... Extensions to the Lattice Model for Computer Security , Jie Wu, Eduardo Fernandez, and Ruigang Zhang, Computers and Security, Vol.11, No .4 (July 1992), p.357. [44 ] “Exploiting the Dual Nature of Sensitivity ... IEEE Symposium on Security and Privacy, IEEE Computer Society Press, 1981, p. 141 . [47 ] “A Security Model for Military Message Systems”, Carl Landwehr, Constance Heitmeyer, and John McLean, ACM ... 1996), p.329. [97] Design and Assurance Strategy for the NRL Pump”, Myong Kang, Andrew Moore, and Ira Moskowitz, IEEE Computer, Vol.31, No .4 (April 1998), p.56. [98] “Blacker: Security for the...