Frédéric Cuppens Claire Saurel Specifying a security policy: a case study. 123- 1996 conf/csfw/1996 CSFW http://doi.ieeecomputersociety.org/10.1109/CSFW.1996.503697 db/conf/csfw/csfw1996.html#CuppensS96