[Bernardi94] A. Bernardi, O. Cherkaoui, N. Rico, and J. Banfield, Specification and Analysis of a Security Management System, 1994 IEEE Network Operations and Management Symposium, Kissimmee, FL, Feb. 14-17, 1994 V2, pp470-485. [This paper presents a modeling method used to build a security management system. This system takes a specification and creates sets of commands that cause a system's protection state to be set to reflect that specification.]