Ron van der Meyden Architectural Refinement and Notions of Intransitive Noninterference. 60-74 2009 ESSoS http://dx.doi.org/10.1007/978-3-642-00199-4_6 conf/essos/2009 db/conf/essos/essos2009.html#Meyden09