Lessons learned using alloy to formally specify MLS-PCA trusted security architecture.

Brant Hashii Lessons learned using alloy to formally specify MLS-PCA trusted security architecture. 86-95 2004 conf/ccs/2004 FMSE http://doi.acm.org/10.1145/1029133.1029145 db/conf/ccs/ccs2004.html#Hashii04