Alvaro Arenas Benjamin Aziz Juan Bicarregui Brian Matthews Erica Y. Yang Modelling Security Properties in a Grid-based Operating System with Anti-Goals. 1429-1436 2008 ARES http://doi.ieeecomputersociety.org/10.1109/ARES.2008.159 conf/IEEEares/2008 db/conf/IEEEares/ares2008.html#ArenasABMY08