Unclassified NSA document on .NET 2.0 Framework Security

[neumann at csl.sri.com (Peter G. Neumann)]

And don't forget the Paul Karger paper from Oakland, which applies access
controls to executables and effectively provides implementations for
Saltzer-Schroeder's least privilege and more:

@InProceedings{Karger87, 
Key="Karger", Author="P.A. Karger", 
Title="Limiting the Damage Potential of Discretionary {T}rojan Horses", 
BookTitle="Proceedings of the 1987 Symposium on Security and Privacy", 
Organization="IEEE Computer Society",
Address="Oakland, California", Year="1987", Month="April", pages="32--37"}