Ramaswamy Chandramouli A Policy Validation Framework for Enterprise Authorization Specification. 319-329 2003 conf/acsac/2003 ACSAC http://csdl.computer.org/comp/proceedings/acsac/2003/2041/00/20410319abs.htm db/conf/acsac/acsac2003.html#Chandramouli03