Oliver Costich: Transaction Processing Using an Untrusted Scheduler in a Multilevel Database with Replicated Architecture. DBSec 1991: 173-189