Keyword: security filesystem unix mls access control

• FSSecModel: Formal verification of an extension of a UNIX compatible, secure filesystem
  Maximiliano Cristiá