Jerome H. Saltzer and M. Frans Kaashoek.
Principles of Computer System Design: An Introduction.
Part I: Morgan Kaufman, 2009. ISBN: 978-0-12374957-4 (paperback), 564 pages.
Part II: Posted on-line with a Creative Commons BY-NC-SA license, 826 pages.
MIT Open CourseWare posting, Elsevier posting

Committee on Offensive Information Warfare, National Research Council, William A. Owens, Kenneth W. Dam, and Herbert S. Lin, editors (Thomas A Berson, Gerhard Casper, David D. Clark, Richard L. Garwin, Jack L. Goldsmith, Carl G. O'Berry, Jerome H. Saltzer, Mark Seiden, Sarah Sewall, Walter B. Slocombe, William O. Studeman, and Michael A Vatis).
Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities.
National Academy Press, Washington, D.C., 2009. ISBN 0-309-13850-7 (paperback).
World-Wide Web version and ordering information for paperback version

Committee on Digital Archiving and the National Archives and Records Administration, Computer Science and Telecommunications Board, National Research Council. (Robert Sproull, Howard Besser, Jamie Callan, Charles Dollar, Stuart Haber, Margaret Hedstrom, Mark Kornbluh, Raymond Lorie, Clifford Lynch, Jerome H. Saltzer, Margo Seltzer, Robert Wilensky, and Jon Eisenberg).
Building an Electronic Records Archive at the National Archives and Records Administration: Recommendations for a Long-Term Strategy.
National Academy Press, Washington, D.C., 2005. ISBN 0-309-09696-0 (paperback), 112 pages.
World-Wide Web version and ordering information for paperback version

Jerome H. Saltzer.
Slammer, an Urgent Wake-up Call.
#35 in Andrew Herbert & Karen Spärck Jones, editors. Computer Systems: theory, technology and applications/A tribute to Roger Needham. Springer, New York, 2004, pages 243-248. Monographs in Computer Science. ISBN 0-387-20170-X
Originally appeared in Computer Systems: Papers for Roger Needham, pages 201-204.
(Microsoft Research Limited: Cambridge, England: February 2003.)
World-Wide Web page.

Committee on an Information Technology Strategy for the Library of Congress, Computer Science and Telecommunications Board, Commission on Physical Sciences, Mathematics, and Applications, National Research Council. (James J. O'Donnell, James Blackaby, Ross E. Brown, Ginnie Cooper, Dale Flecker, Nancy Frishberg, James Gray, Margaret Hedstrom, Carl Lagoze, Lawrence H. Landweber, David M. Levy, Ann Okerson, Doug Rowan, Jerome H. Saltzer, Howard Turtle, and Mary Ellen Zurko.)
LC21: A Digital Strategy for the Library of Congress.
National Academy Press, Washington, D.C., 2001. ISBN 0-309-07144-5 (paperback), 265 pages.
World-Wide Web version and ordering information for paperback version

David P. Reed, Jerome H. Saltzer, and David D. Clark.
Comment on Active Networking and End-to-End Arguments.
IEEE Network 12, 3 (May/June 1998) pages 69-71.
Prepublication version: World-Wide Web page, PostScript, ASCII text

Li Gong, T. Mark A. Lomas, Roger M. Needham, and Jerome H. Saltzer.
Protecting Poorly Chosen Secrets from Guessing Attacks.
IEEE Journal on Selected Areas in Communications 11, 5 (June 1993) pages 648-656. [Received the 1994 Leonard G. Abraham Best Paper Award of the IEEE Communications Society.]
LaTeX source

Jerome H. Saltzer.
Technology, Networks, and the Library of the Year 2000.
in A. Bensoussan and J.-P. Verjus, editors. Future Tendencies in Computer Science, Control, and Applied Mathematics. Springer-Verlag, 1992, pages 51-67. Lecture Notes in Computer Science 653. Proceedings of the International Conference on the Occasion of the 25th Anniversary of Institut National de Recherche en Informatique et Automatique (INRIA,) Paris, France, December 1992. ISBN 3-540-56320-2
World-Wide Web page, PostScript, ASCII text

Jerome H. Saltzer.
Needed: A Systematic Structuring Paradigm for Distributed Data.
Operating Systems Review 27, 2 (April 1993), pages 77-81. Originally distributed as paper #41 in ACM SIGOPS Fifth European Workshop, September 21-23, 1992, Le Mont Saint-Michel, France, pages 1-5.
World-Wide Web page, PostScript, FrameMaker 3 source, FrameMaker slides for talk

Jerome H. Saltzer.
File System Indexing, and Backup.
in Arthur Karshmer and Juergen Nehmer, editors. Operating Systems for the 90's and Beyond. Springer-Verlag, 1991, pages 13-19. Lecture Notes in Computer Science 563.
World-Wide Web page, PostScript, SCRIBE source

Jerome H. Saltzer.
Fault-Tolerance in Very Large Archive Systems.
Operating Systems Review 25, 1 (January, 1991), pages 81-82. Originally distributed as a working paper at the ACM SIGOPS Fourth European Workshop, 3-5 September 1990).
World-Wide Web page, ASCII text

T. Mark A. Lomas, Li Gong, Jerome H. Saltzer, and Roger M. Needham.
Reducing Risks from Poorly Chosen Keys.
ACM Twelfth Symposium on Operating Systems Principles, in Operating Systems Review 23, 5 (December 1989) pages 14-18.
TeX source

George Champine, Steven Lerman, and Jerome H. Saltzer.
Project ATHENA as a Next Generation Educational Computing System.
in GI - 19. Jahrestagung, I, Computergestützter Arbeitsplatz [Proceedings of the 19th annual meeting of the Society for Computer Science: The Computer-Assisted Workplace], edited by Manfred Paul, (October 1989), Informatik-Fachberichte 222. Springer-Verlag, 1989, ISBN 3-540-51821-5, pages 21-29
Not available on-line.

Steven R. Lerman and Jerome H. Saltzer.
Principles of Responsible Use of Project Athena.
M. I. T. Project Athena, version of 1 December 1988. Appeared as "Statement of Ethics". Communications of the ACM 32, 6 (June 1989) page 704. (CACM did not credit Lerman.) Reprinted in Peter J. Denning, editor. Computers Under Attack. ACM Press, New York, 1990, pages 508-510.
PostScript, Scribe source, Correction for CACM version

Jerome H. Saltzer.
Some Unsolved Problems of Distributed System Management, as seen from Project Athena.
in Wolfgang Schroeder-Preikschat and Wolfgang Zimmer, editors. Progress in Distributed Operating Systems and Distributed Systems Management. Springer-Verlag, 1989, page 202. Lecture Notes in Computer Science 433. ISBN 3-540-52609-9
formatted ASCII text

Jerome H. Saltzer.
Project Athena Facilities--an Overview for Faculty.
M. I. T. Project Athena, 1988. Reprinted in Project Athena: The First Five Years, Volume 1. Digital Equipment Corporation, Hudson, Massachusetts, 1988.
Scribe source

Jerome H. Saltzer, editor.
Project Athena Technical Plan.
M. I. T. Project Athena, 1987. Reprinted in Project Athena: The First Five Years, Volume 1. Digital Equipment Corporation, Hudson, Massachusetts, 1988.
FTP site (Scribe source)

Jerome H. Saltzer, David D. Clark, John L. Romkey, and Wayne C. Gramlich.
The Desktop Computer as a Network Participant.
IEEE Journal of Selected Areas in Communications SAC-3, 3, May, 1985, pages 468-478. (A preliminary version of this paper was distributed at the ACM SIGOPS/IBM Zurich workshop on operating systems in computer networks, 28-30 January 1985.)
Scribe/Finalword source

Jerome H. Saltzer.
System for regenerating a data word on a communications ring.
United States Patent 4,438,520. Filed 22 July 1981, issued 20 March 1984.
Full-text version with drawings from the US Patent Office. Their server holds the scanned images. (If the scanned image link fails, try the USPTO search page and enter the patent number.)

Jerome H. Saltzer.
On The Naming and Binding of Network Destinations.
in Pier Ravasio et al., editors. Local Computer Networks. North Holland, Amsterdam, 1982, pages 311-317.
Also available as Internet RFC 1498, transcribed August 1993 by J. Noel Chiappa.
Multics runoff source

Jerome H. Saltzer.
Communication Ring Initialization without Central Control.
M.I.T. Laboratory for Computer Science Technical Memorandum LCS/TM-202, December 1981.
World-Wide Web page, Multics runoff source

Jerome H. Saltzer, David D. Clark, and Kenneth T. Pogran.
Why a Ring?
IEEE Seventh Data Communications Symposium, October, 1981, pages 211-217. Also published as ACM Computer Communication Review 11, 4 (December 1981). Reprinted in Computer Networks 7, 4, August 1983, pages 223-231. Also reprinted in William Stalling, editor. Tutorial: Local Network Technology IEEE Press, pages 85-90.
Multics runoff source. In 2000, Thomas Van Vleck kindly rendered it into a World-Wide Web page.

Jerome H. Saltzer, David P. Reed, and David D. Clark.
End-to-End Arguments in System Design.
Second International Conference on Distributed Computing Systems (April 1981) pages 509-512. Published with minor changes in ACM Transactions in Computer Systems 2, 4, November 1984, pages 277-288. Reprinted in Craig Partridge, editor Innovations in internetworking. Artech House, Norwood, MA, 1988, pages 195-206. ISBN 0-89006-337-0. Also scheduled to be reprinted in Amit Bhargava, editor. Integrated broadband networks. Artech House, Boston, 1991. ISBN 0-89006-483-0.
Scribe/FinalWord source. In 1997, George Coulouris kindly ported the Scribe text into Portable Document Format (PDF, requires Adobe Reader), PostScript, Rich Text Format (RTF), and ASCII text.

Jerome H. Saltzer, David P. Reed, and David D. Clark.
Source Routing for Campus-Wide Internet Transport.
in Anthony West and Philippe Janson, editors. Local Networks for Computer Communications. North Holland, Amsterdam, 1981, pages 1-23. An earlier version was published as Internet Engineering Note IEN-144 (March, 1980).
World-Wide web form, provided by David Reed. Multics runoff source (book version) ASCII Text (IEN version)

Jerome H. Saltzer.
Environment Considerations for Campus-Wide Networks. Internet Engineering Note IEN-143 (March 1980).
ASCII text

Jerome H. Saltzer and Kenneth T. Pogran.
A Star-Shaped Ring Network with High Maintainability.
NBS-Mitre Local Area Communications Network Symposium (May, 1979) pages 179-190. Reprinted in Computer Networks 4, 5 (October 1980) pages 239-244.
Multics runoff source (omits figures). In 2000, Thomas Van Vleck kindly rendered it into a World-Wide Web page (also omits figures).

Jerome H. Saltzer.
Performance Analysis and Evaluation: No Connection with Reality.
in Peter Wegner, editor Research Directions in Software Technology. M. I. T. Press, Cambridge, 1979, pages 652-654.
(Copy not available on-line.)

Michael D. Schroeder, David D. Clark, Jerome H. Saltzer, and Douglas Wells
Final Report of the Multics Kernel Design Project.
M. I. T. Project MAC Technical Report MAC-TR-196, March 1978. 111 pages.
(Original Multics runoff source not located.) Scanned page images via NCSTRL or via FTP.

Rudolph Bayer, Robert M. Graham, Jerome H. Saltzer, and Gerhard Seegmuller.
Introduction.
in Rudolph Bayer, et al. Operating Systems--An Advanced Course. Springer-Verlag, 1978, pages 2-6. Lecture Notes on Computer Science 60.
(Chapter not available on-line.)

Jerome H. Saltzer.
Naming and Binding of Objects.
in Rudolph Bayer, et al. Operating Systems--An Advanced Course. Springer-Verlag, 1978, pages 99-208. Lecture Notes on Computer Science 60.
Originally prepared off-line. In 1999 Vladimir Marangozov kindly scanned, converted to text form with OCR, and made available this document as a World-Wide Web page (474 Kbytes) and in Portable Document Format (PDF, requires Adobe Reader, 454 Kbytes).

Jerome H. Saltzer.
Research Problems of Decentralized Systems with Largely Autonomous Nodes.
in ACM Operating Systems Review 12, 1 (January 1978) pages 43-52. Reprinted in Rudolph Bayer, et al, editors. Operating Systems--An Advanced Course. Springer-Verlag, 1978, pages 583-593. Lecture Notes on Computer Science 60.
(Chapter not available on-line.)

Jerome H. Saltzer.
On Digital Signatures.
ACM Operating Systems Review 12, 1 (January 1978) pages 12-14.
(Letter not available on-line.)

Michael D. Schroeder, David D. Clark, and Jerome H. Saltzer.
The Multics Kernel Design Project.
Sixth ACM Symposium on Operating Systems Principles, in ACM Operating Systems Review 11, 5 (November 1977) pages 43-56.
This paper is available on-line in the ACM Digital Library (a subscription service).

Jerome H. Saltzer.
31363; The Solo operating system: A Concurrent Pascal program, by Per Brinch Hansen (review).
Computing Reviews 18, 5 (May 1977) page 184.
(Review not available on-line.)

Jerome H. Saltzer.
31353; Disk Scheduling at compile time, by Per Brinch Hansen (review).
Computing Reviews 18, 6 (May 1977) page 181.
(Review not available on-line.)

Jerome H. Saltzer.
Computer.
in Yearbook of Science and Technology McGraw-Hill, New York, 1976, pages 142-143.
(Article not available on-line.)

Jerome H. Saltzer.
On the Modeling of Paging Algorithms.
ACM Forum, Communications of the ACM 19, 5 (May 1976) pages 307-308.
This letter is available in the ACM Digital Library (a subscription service).

Jerome H. Saltzer.
Technical Possibilities and Problems in Protecting Data in Computer Systems.
in Rudiger Dierstein et al., editors. Datenschutz und Datensicherung. J. P. Bachem Verlag, Cologne, 1976, pages 27-36.
(Paper not available on-line.)

Jerome H. Saltzer, and Michael D. Schroeder.
The Protection of Information in Computer Systems. (invited tutorial paper)
Proceedings of the IEEE 63, 9 (September 1975) pages 1278-1308. Reprinted in David D. Clark and David D. Redell, editors. Protection of Information in Computer Systems. IEEE 1975 CompCon tutorial. IEEE # 75CH1050-4. Also reprinted in Rein Turn, editor. Advances in Computer System Security. ArTech House, Dedham, MA, 1981, pages 105-135. ISBN 0-89006-096-7 Also reprinted in Marvin S. Levin, Steven B. Lipner, and Paul A. Karger. Protecting Data & Information: A Workshop in Computer & Data Security. Digital Equipment Corporation, 1982.
This paper was originally prepared off-line. In 1997, Norman Hardy kindly rendered it into World-Wide Web form.

Jerome H. Saltzer, chair
System Implications of Advancing Storage Technology (panel discussion)
AFIPS 1975 National Computer Conference, Cassette tape NCC-63, AFIPS Press, Montvale, New Jersey, 1975. Review #29477 in Computing Reviews 17, 1 (January 1976).
(Paper not available on-line.)

Jerome H. Saltzer.
Ongoing Research and Development in Information Protection.
ACM Operating Systems Review 8, 3 (July 1974) pages 8-24. Reprinted in Computer Security and Privacy Symposium. Honeywell Information Systems, August 1975, pages 53-62.
(Paper not available on-line.)

Jerome H. Saltzer.
Protection and the Control of Information Sharing in Multics.
Fourth ACM Symposium on Operating System Principles (October 1973) pages 10-24 of preprint package. Revised version appeared in Communications of the ACM 17, 7 (July 1974) pages 388-402. Note: Some preprints carried the title "Information Protection and the Control of Sharing in the Multics System." Reprinted in David D. Clark and David D. Redell, editors. Protection of Information in Computer Systems. IEEE 1975 CompCon tutorial. IEEE # 75CH1050-4. Review #27327 in Computing Reviews 15, 10 (October 1974).
The CACM version of this paper is available on-line in the ACM Digital Library (a subscription service).

Jerome H. Saltzer.
A Simple Linear Model of Demand Paging Performance.
Communications of the ACM 17, 4 (April 1974) pages 181-186.
A preprint was distributed as Multics Repository document M0131, November 3, 1972.
This paper is available in the ACM Digital Library (a subscription service). An OCR'ed version of the preprint is also available.

Jerome H. Saltzer.
Introduction to Multics.
M. I. T. Project MAC Technical Report MAC-TR-123, January 1974. Also published as Multiplexed Information and Computing Service: Programmers' Manual Part I, Introduction (9/30/73). Honeywell Corporation.
(Original runoff source not located.) Scanned page images via NCSTRL or via FTP.

Jerome H. Saltzer and Douglas H. Hunt.
Some recently repaired security holes in Multics.
Project Mac Computer Systems Research Request for Comments #46 (28 January 1974), later reprinted in David D. Clark, editor. Ancillary Reports: Kernel Design Project. MIT Laboratory for Computer Science Technical Memo MIT/LCS/TM-87, 1977.
Portable Document Format (PDF, requires Adobe Reader) from scan & OCR of paper original.

Jerome H. Saltzer, Philippe A. Janson, and Douglas H. Hunt.
Some Multics security holes which were closed by 6180 hardware.
Project Mac Computer Systems Research Request for Comments #46 (28 January 1974), later reprinted in David D. Clark, editor. Ancillary Reports: Kernel Design Project. MIT Laboratory for Computer Science Technical Memo MIT/LCS/TM-87, 1977.
Portable Document Format (PDF, requires Adobe Reader) from scan & OCR of paper original.

Jerome H. Saltzer.
Repaired security bugs in Multics.
Project Mac Computer Systems Research Request for Comments #5 (7 February 1973), later reprinted in David D. Clark, editor. Ancillary Reports: Kernel Design Project. MIT Laboratory for Computer Science Technical Memo MIT/LCS/TM-87, 1977.
Portable Document Format (PDF, requires Adobe Reader). from scan & OCR of paper original.

Corbató, F. J., Jerome H. Saltzer, and Clingen, C. T.
Multics--The First Seven Years.
AFIPS Conf. Proc 40 (1972 Spring Joint Computer Conference) AFIPS Press, 1972, pages 571-583. Also distributed as Multics document M0130, 17 January 1972. Reprinted in Paul H. Rosenthal and Russell K. Mink, editors. Multi-Access Computing: modern research and requirements. Hayden Books, Rochelle Park, 1974, pages 116-139. Reviews #25199 in Computing Reviews 14, 6 (June 1973) and #27971 in 15, 3 (March 1975).
Originally prepared off-line. Thomas Van Vleck kindly OCR'ed this paper and rendered it in World-Wide Web form. His original link-annotated version is available on the Multics web site.

Michael D. Schroeder and Jerome H. Saltzer.
A Hardware Architecture for Implementing Protection Rings.
Third ACM Symposium on Operating Systems Principles (October, 1971) pages 42-54. Revised version appeared in Communications of the ACM 15, 3 (March 1972) pages 157-170. Reprinted in Lance Hoffmann, editor. Security and Privacy in Computer Systems. Melville, Los Angeles, 1973, pages 318-350.
(Original runoff source not located)
The CACM version of this paper is available on-line in the ACM Digital Library (a subscription service).

Jerome H. Saltzer.
Computer Systems: Future Research Directions.
RCA Engineer 17, 1 (June 1971) pages 23-24.
(Paper not available on-line.)

Jerome H. Saltzer.
Some Observations about Decentralization of File Systems.
Digest IEEE COMPCON, September 1971, pages 163-164. Also distributed as Multics document M0128.
(Paper not available on-line.)

David D. Clark, Robert M. Graham, Jerome H. Saltzer, and Michael D. Schroeder.
The Classroom Information and Computing Service.
M. I. T. Project MAC Technical Report MAC-TR-80, January 1971. Review #24770 in Computing Reviews 14, 3 (March 1973).
World-Wide Web page containing an abstract. The report itself is not available on-line.

Joseph F. Ossanna and Jerome H. Saltzer.
Technical and Human Engineering Problems in Connecting Terminals to a Time-Sharing System.
AFIPS Conf. Proc. 37 (1970 Fall Joint Computer Conference) AFIPS Press, 1970, pages 355-362. Review #24885 in Computing Reviews 14, 4 (April 1973).
(Original runoff or roff source not located; paper not available on-line.)

Jerome H. Saltzer and Joseph F. Ossanna.
Remote Terminal Character Stream Processing in Multics.
AFIPS Conf. Proc. 36 (1970 Spring Joint Computer Conference) AFIPS Press, 1970, pages 621-627. Also distributed as Multics document M0121, 10 March 1970. Review #19796 in Computing Reviews 11, 9 (September 1970).
(Paper not available on-line.)

Jerome H. Saltzer and John W. Gintell.
The Instrumentation of Multics.
Second ACM Symposium on Operating Systems Principles (December, 1969) pages 167-174. Revised version appeared in Communications of the ACM 13, 8 (August 1970) pages 495-500. Reprinted in P. Freeman. Software Systems Principles. Science Research Associates, Chicago, 1975, pages 524-536. Review #23233 in Computing Reviews 12, 5 (May 1971).
John Gintell kindly scanned the CACM version of this paper and rendered it into World-Wide Web form.

Fernando J. Corbató and Jerome H. Saltzer.
Some Considerations of Supervisor Program Design for Multiplexed Computer Systems.
IFIP Congress 1968 Invited Papers, North-Holland, 1968, pp. 66-71. Also distributed as Project Mac Memorandum MAC-M-372, May 1968. Review #16243 in Computing Reviews 10, 2 (February 1969).
(Paper not available on-line.)

Jerome H. Saltzer.
Development of Executive Routines, Both Hardware and Software, by A. B. Tonik (review).
IEEE Transactions on Computer Systems C-17, 9 (September 1968) pages 923-924.
(Review not available on-line.)

Jerome H. Saltzer.
Traffic Control in a Multiplexed Computer System.
M. I. T. Project MAC Technical Report MAC-TR-30, June 1966.
(Original CTSS runoff source not located.)
Scanned page images in portable document format (PDF/Adobe Reader). Large file warning: 3.6 Mbytes.

Jerome H. Saltzer.
Manuscript Typing and Editing.
in Patricia Crisman, editor. The Compatible Time-Sharing System, A Programmer's Guide. Second edition. M. I. T. Press, 1965, section AH.9.01. An earlier version was distributed as TYPSET and RUNOFF, Memorandum editor and type-out commands. Computation Center Memorandum and Project MAC Memorandum CC-244/MAC-M-193, 6 November 1964.
(CTSS runoff source not located.) A paper copy of the December 1966 version has been scanned, OCR'ed and rendered in Portable Document Format (PDF, requires Adobe Reader) and as a World Wide Web page.

Jerome H. Saltzer.
CTSS Technical Notes.
M. I. T. Project MAC Technical Report MAC-TR-16, March 1965. Originally distributed as Project MAC Memorandum MAC-M-152.
(CTSS runoff source not located.) Scanned page images via NCSTRL or via FTP.

Fernando J. Corbató, John W. Poduska, and Jerome H. Saltzer.
Advanced Computer Programming.
M. I. T. Press, 1963.
(Book not available on-line.)

William L. Black and Jerome H. Saltzer.
Resistive Diode Network Theory.
Tech Engineering News XLI, 4 (January 1960) pages 18-23.
(Paper not available on-line.)