John E. Dobson Conversation Structures as a Means of Specifying Security Policy. 25-39 1989 DBSec db/conf/dbsec/dbsec89.html#Dobson89