Philip Morris John A. McDermid Formalizing and Validating Complex Security Requirements. 113-124 1992 conf/dbsec/1992 DBSec db/conf/dbsec/dbsec92.html#MorrisM92