Anu Singh C. R. Ramakrishnan I. V. Ramakrishnan Scott D. Stoller David Scott Warren Security policy analysis using deductive spreadsheets. 42-50 2007 FMSE http://doi.acm.org/10.1145/1314436.1314443 conf/ccs/2007fmse db/conf/ccs/ccs2007fmse.html#SinghRRSW07