Thanks to Michael Howard for passing this along...

"This list of papers was initially distributed on CD-ROM at NISSC '98. These papers are unpublished, seminal works in computer security. They are papers every serious student of computer security should read."

http://blogs.msdn.com/michael_howard/archive/2005/06/07/426365.aspx