Security Properties Consistent with the Testing Semantics for Communicating Processes.

Dale M. Johnson F. Javier Thayer Security Properties Consistent with the Testing Semantics for Communicating Processes. 9-21 1989 CSFW db/conf/csfw/csfw1989.html#JohnsonT89