2nd USENIX Workshop on Hot Topics in Security,
USENIX (2007), pp. 5
Mark S. Miller, Jed Donnelley, Alan H. Karp
From the very beginnings of access control:
Should we be safe by construction,
or should we patrol?
Horton shows how, in an elegant way,
we can simply do both, and so save the day.
with apologies to Dr. Seuss