Thuong Doan Steven A. Demurjian T. C. Ting Andreas Ketterl MAC and UML for secure software design. 75-85 2004 conf/ccs/2004 FMSE http://doi.acm.org/10.1145/1029133.1029144 db/conf/ccs/ccs2004.html#DoanDTK04