Hiroaki Tanizaki Takuya Katayama Formalization and Consistency Checking of Changes of Software System Configurations Using Alloy. 343-350 2008 APSEC http://dx.doi.org/10.1109/APSEC.2008.64 conf/apsec/2008 db/conf/apsec/apsec2008.html#TanizakiK08