Jaisook Landauer Timothy Redmond Terry Benzel Formal Policies for Trusted Processes. 31-40 1989 CSFW db/conf/csfw/csfw1989.html#LandauerRB89