D.D. Clark and D.R. Wilson
A Comparison of Commercial and Military Computer Security Policies
Proc. of the 1987 IEEE Symposium on Security and Privacy.
This paper is NOT available in the IEEE digital library (which stops at 1988). The Clark-Wilson model is discussed in the reference texts.