Verifying the EROS Confinement Mechanism.

Published in: IEEE Symposium on Security and Privacy (2000)