Saltzer and Schroeder 1975

GPTKB entity