Masakazu Soshi Safety Analysis of the Dynamic-Typed Access Matrix Model. 106-121 2000 conf/esorics/2000 ESORICS http://dx.doi.org/10.1007/10722599_7 db/conf/esorics/esorics2000.html#Soshi00