Matt Bishop, Computer Security Laboratory, Dept. of Computer Science, University of California at Davis