Editing Multics (section)

===Security===
* Paul A. Karger, Roger R. Schell, ''[http://csrc.nist.gov/publications/history/karg74.pdf Multics Security Evaluation: Vulnerability Analysis]'' (Air Force Electronic Systems Division, 1974) describes the classic attacks on Multics security by a "[[tiger team]]".
* [[Jerome H. Saltzer]], Michael D. Schroeder, ''[http://cap-lore.com/CapTheory/ProtInf/ The Protection of Information in Computer Systems]'' (Proceedings of the [[IEEE]], September 1975) describes the fundamentals behind the first round of security upgrades; another classic paper.
* [[Michael Schroeder|M. D. Schroeder]], D. D. Clark, [[J. H. Saltzer]], D. H. Wells. ''[https://web.archive.org/web/20011124185621/http://ncstrl.mit.edu/Dienst/UI/2.0/Describe/ncstrl.mit_lcs/LCS-TR-196?abstract=saltzer Final Report of the Multics Kernel Design Project]'' (MIT LCS, 1978) describes the security upgrades added to produce an even more improved version.
* Paul A. Karger, Roger R. Schell, ''[http://www.acsac.org/2002/papers/classic-multics.pdf Thirty Years Later: Lessons from the Multics Security Evaluation]'' (IBM, 2002) is an interesting retrospective which compares actual deployed security in today's hostile environment with what was demonstrated to be possible decades ago. It concludes that Multics offered considerably stronger security than most systems commercially available in 2002.