Principle of Identifiably. … When identity is threatened … the user is vulnerable to error. Identification has … different). … If an untrusted program can cause an object … it can produce confusion that has security consequences. … [p. 288] The same … identify and distinguish as objects.
Google-1
Google-2
Copyright clearance needed for quotation.