1

System/370 Principles of Operation, GA22-7000-9, IBM, 1983.

2

Henry M. Levy, Capability-Based Computer Systems, Butterworth-Heinemann, Newton, MA, 1984

3

OS/VS2 MVS Supervisor Services and Macro Instructions, GC28-1114-1, IBM, 1983.

4

Henry Ledgard, Reference Manual for the ADA Programming Language, Springer-Verlag New York, Inc., Secaucus, NJ, 1983

5

Dennis M. Ritchie , Ken Thompson, The UNIX time-sharing system, Communications of the ACM, v.17 n.7, p.365-375, July 1974  [doi>10.1145/361011.361061]

6

KeyKOS Principles of Operation, KL02-01, Key Logic, 1985 (Draft).

7

Adele Goldberg , David Robson, Smalltalk-80: the language and its implementation, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 1983

8

William A. Wulf, Roy Levin, and Samuel P. Harbison, Hydra/C.mmp An Experimental Computer System, McGraw-Hill Book Company, 1981.

9

Virtual Machine/System Product CMS Command and Macro Reference, SC 19-6209-1, IBM, 1983.

Kazuhiro Fuchi , Robert Kowalski , Koichi Furukawa , Kazunori Ueda , Ken Kahn , Takashi Chikayama , Evan Tick, Launching the new era, Communications of the ACM, v.36 n.3, p.49-100, March 1993

Jonathan S. Shapiro , Jonathan M. Smith , David J. Farber, EROS: a fast capability system, ACM SIGOPS Operating Systems Review, v.33 n.5, p.170-185, Dec. 1999

Dan S. Wallach , Dirk Balfanz , Drew Dean , Edward W. Felten, Extensible security architectures for Java, ACM SIGOPS Operating Systems Review, v.31 n.5, p.116-128, Dec. 1997

Jay Lepreau , Bryan Ford , Mike Hibler, The persistent relevance of the local operating system to global applications, Proceedings of the 7th workshop on ACM SIGOPS European workshop: Systems support for worldwide applications, September 09-11, 1996, Connemara, Ireland

Timothy Roscoe , Bryan Lyles, Distributing processing without DPEs: design considerations for public computing platforms, Proceedings of the 9th workshop on ACM SIGOPS European workshop: beyond the PC: new challenges for the operating system, September 17-20, 2000, Kolding, Denmark

Jonathan S. Shapiro , Norman Hardy, EROS: A Principle-Driven Operating System from the Ground Up, IEEE Software, v.19 n.1, p.26-33, January 2002

Hao Chen , Jonathan S. Shapiro, Using build-integrated static checking to preserve correctness invariants, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA

Ewa Z. Bem , John Rosenberg, An algorithm for stabilising multiple stores, Proceedings of the 9th workshop on ACM SIGOPS European workshop: beyond the PC: new challenges for the operating system, September 17-20, 2000, Kolding, Denmark

Li Gong, On security in capability-based systems, ACM SIGOPS Operating Systems Review, v.23 n.2, p.56-60, April 1989

Norm Hardy, The Confused Deputy: (or why capabilities might have been invented), ACM SIGOPS Operating Systems Review, v.22 n.4, p.36-38, Oct. 1988

Andy Bavier , Mic Bowman , Brent Chun , David Culler , Scott Karlin , Steve Muir , Larry Peterson , Timothy Roscoe , Tammo Spalink , Mike Wawrzoniak, Operating system support for planetary-scale network services, Proceedings of the 1st conference on Symposium on Networked Systems Design and Implementation, p.19-19, March 29-31, 2004, San Francisco, California

Anshumal Sinha , Sandeep Sarat , Jonathan S. Shapiro, Network subsystems reloaded: a high-performance, defensible network subsystem, Proceedings of the USENIX Annual Technical Conference 2004 on USENIX Annual Technical Conference, p.19-19, June 27-July 02, 2004, Boston, MA

Jonathan S. Shapiro , Jonathan Adams, Design Evolution of the EROS Single-Level Store, Proceedings of the General Track: 2002 USENIX Annual Technical Conference, p.59-72, June 10-15, 2002

William S. Frantz , Charles R. Landau, Object oriented transaction processing in the KeyKOS microkernel, USENIX Symposium on USENIX Microkernels and Other Kernel Architectures Symposium, p.2-2, September 20-23, 1993, San Diego, California

Jun Li , Alan H. Karp, Access control for the services oriented architecture, Proceedings of the 2007 ACM workshop on Secure web services, November 02-02, 2007, Fairfax, Virginia, USA

Gernot Heiser , Kevin Elphinstone , Ihor Kuz , Gerwin Klein , Stefan M. Petters, Towards trustworthy computing systems: taking microkernels to the next level, ACM SIGOPS Operating Systems Review, v.41 n.4, July 2007

Neal H. Walfield , Marcus Brinkmann, A critique of the GNU hurd multi-server operating system, ACM SIGOPS Operating Systems Review, v.41 n.4, July 2007

Dhammika Elkaduwe , Philip Derrin , Kevin Elphinstone, Kernel design for isolation and assurance of physical memory, Proceedings of the 1st workshop on Isolation and integration in embedded systems, p.35-40, April 01-01, 2008, Glasgow, Scotland

Matthew Finifter , Adrian Mettler , Naveen Sastry , David Wagner, Verifiable functional purity in java, Proceedings of the 15th ACM conference on Computer and communications security, October 27-31, 2008, Alexandria, Virginia, USA

Zooko Wilcox-O'Hearn , Brian Warner, Tahoe: the least-authority filesystem, Proceedings of the 4th ACM international workshop on Storage security and survivability, October 31-31, 2008, Alexandria, Virginia, USA

Norman Hardy: colleagues