Torben Amtoft Anindya Banerjee Verification condition generation for conditional information flow. 2-11 2007 FMSE http://doi.acm.org/10.1145/1314436.1314438 conf/ccs/2007fmse db/conf/ccs/ccs2007fmse.html#AmtoftB07